CVE-1999-1223
CVSS 2.0 Score 5.0 of 10 (medium)
Details
Published Dec 31, 1999
Updated: Nov 20, 2024
Summary
CVE-1999-1223 is a denial-of-service vulnerability affecting Internet Information Services (IIS) version 3.0. Malicious actors can trigger the issue by making requests to an Active Server Page (ASP) that includes a large number of forward slash characters in the URL. The excessive number of slashes overloads the server, leading to a crash and subsequent denial of service. This vulnerability can potentially disrupt the availability of IIS-hosted websites.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Microsoft IIS
Affected Vendors
- Microsoft