5
CVSSv2

CVE-1999-0448

Published: 01/01/1999 Updated: 17/08/2022
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote malicious user to hide the URL they really request.

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft internet information server 4.0

Exploits

source: wwwsecurityfocuscom/bid/191/info An http get request against an IIS4 server will not be logged if the request is longer than 10150 bytes long /* Compile with eg Visual C++ and link with wsock32lib #include <stdioh> #include <winsock2h> #include <stringh> int main (int argc, char *argv[]) { int snd, rcv, ...