CVE-1999-1223
CVSS 2.0 Score 5.0 of 10 (medium)
Details
Published Dec 31, 1999
Updated: Nov 20, 2024
Summary
CVE-1999-1223 is a denial-of-service vulnerability affecting Internet Information Services (IIS) version 3.0. An attacker can cause IIS to crash by making a request to an Active Server Page (ASP) with a URL containing an excessive number of forward slashes (/). This can result in IIS becoming unresponsive and denying legitimate access to the resource. The vulnerability can be exploited remotely, making it a significant security concern for systems running IIS 3.0.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft IIS
Affected Vendors
- Microsoft