CVE-1999-1348

Summary

CVE-1999-1537 is a vulnerability affecting Microsoft IIS 3.x and 4.x servers. The issue arises from the server's inability to distinguish between encrypted and non-encrypted pages, leading to a denial-of-service (DoS) attack. Attackers can send SSL requests to the HTTPS port for normally unencrypted files, causing IIS to perform extra work to send the files over SSL. This results in resource exhaustion and service interruption.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.