CVE-1999-1223

IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a large number of / (forward slash) characters.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

1999-12-31

Last modified

2024-08-01

Affected products

• Internet Information Server (Microsoft)

References

• http://support.microsoft.com/support/kb/articles/q187/5/03.asp
• https://exchange.xforce.ibmcloud.com/vulnerabilities/3892