| Vulnerability Name: | CVE-1999-0874 (CCN-2281) | ||||||||
| Assigned: | 1999-06-08 | ||||||||
| Published: | 1999-06-08 | ||||||||
| Updated: | 2018-10-12 | ||||||||
| Summary: | Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions. | ||||||||
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
| ||||||||
| Vulnerability Type: | CWE-119 | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: CCN Type: CIAC Information Bulletin J-048 Malformed HTR Request Vulnerability Source: MITRE Type: CNA CVE-1999-0874 Source: MSKB Type: UNKNOWN Q234905 Source: CCN Type: CERT Advisory CA-1999-07 IIS Buffer Overflow Source: CIAC Type: UNKNOWN J-048 Source: EEYE Type: UNKNOWN AD06081999 Source: CCN Type: eEye Digital Security Team Alert AD06081999 Retina vs. IIS4, Round 2 Source: CCN Type: Internet Security Systems Security Alert #28 Malformed HTR File Vulnerability in Microsoft Internet Information Server 4.0 Source: CCN Type: Microsoft Security Bulletin MS01-041 Malformed RPC Request Can Cause Service Failure Source: CCN Type: Microsoft Security Bulletin MS02-001 Trusting Domains Do Not Verify Domain Membership of SIDs in Authorization Data Source: CCN Type: Microsoft Security Bulletin MS02-018 Cumulative Patch for Internet Information Services (Q319733) Source: CCN Type: Microsoft Security Bulletin MS02-062 Cumulative Patch for Internet Information Service (Q327696) Source: CCN Type: Microsoft Security Bulletin MS03-018 Cumulative Patch for Internet Information Service (811114) Source: CCN Type: Microsoft Security Bulletin MS99-019 Workaround Available for 'Malformed HTR Request' Vulnerability Source: CCN Type: National Infrastructure Protection Center Advisory 99-015.1 "Microsoft Internet Information Server Version 4.0" Source: CCN Type: OSVDB ID: 97 Microsoft IIS ISM.DLL HTR Request Overflow Source: CCN Type: BID-307 NT IIS4 Buffer Overflow Vulnerability Source: MS Type: UNKNOWN MS99-019 Source: XF Type: UNKNOWN iis-htr-overflow(2281) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:915 Source: CCN Type: Microsoft Knowledge Base Article 234905 An Improperly Formatted HTTP Request Can Cause The Inetinfo Process To Fail | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration 2: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| Oval Definitions | |||||||||
| |||||||||
| BACK | |||||||||