CVE-1999-1537

Summary

CVE-1999-1577 exposes a vulnerability in IIS 3.x and 4.x servers, allowing remote attackers to cause a denial-of-service (DoS) by sending SSL requests to the HTTPS port for unencrypted files. IIS fails to distinguish between encrypted and non-encrypted pages, resulting in additional work to send the files securely, leading to resource exhaustion. This issue can potentially impact the availability of affected servers.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.