| Vulnerability Name: | CVE-2000-0167 (CCN-4790) | ||||||||
| Assigned: | 2000-02-15 | ||||||||
| Published: | 2000-02-15 | ||||||||
| Updated: | 2008-09-10 | ||||||||
| Summary: | IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory. | ||||||||
| CVSS v3 Severity: | 4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
| ||||||||
| CVSS v2 Severity: | 2.1 Low (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Denial of Service | ||||||||
| References: | Source: MITRE Type: CNA CVE-2000-0167 Source: CCN Type: NTBugTraq Mailing List, Tue, 15 Feb 2000 16:50:34 +0100 Crashing Inetinfo.exe by using a longfilename in the \mailroot\pickup directory Source: NTBUGTRAQ Type: UNKNOWN 20000215 Crashing Inetinfo.exe by using a longfilename in the \mailroot\pickup directory Source: CCN Type: OSVDB ID: 13634 Microsoft IIS Inetinfo.exe Malformed Long Mail File Name DoS Source: CCN Type: BID-1819 Microsoft IIS 4.0 Pickup Directory DoS Vulnerability Source: XF Type: UNKNOWN iis-pickup-directory-dos(4790) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||