Published: 11/05/2000 Updated: 30/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

IIS 4.05 and 5.0 allow remote malicious users to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extension Data in URL" vulnerability.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft internet information server 4.0
microsoft internet information services 5.0

source: wwwsecurityfocuscom/bid/1190/info Sending a specially crafted URL containing malformed file extension information to Microsoft IIS 40/50 will consume CPU usage until it reaches 100% which will halt the program's services Restarting the application or waiting until the URL is processed will be required in order to regain normal ...

NVD-CWE-Other http://www.ussrback.com/labs40.html http://www.microsoft.com/technet/support/kb.asp?ID=260205 http://www.securityfocus.com/bid/1190 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-030 https://nvd.nist.gov https://www.exploit-db.com/exploits/19907/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2000-0408

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect