CVE-1999-0448

IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request.

Affected products

Apache, Iis

Microsoft Internet Information Server

= 4.0

CVSS 2.0

5.0 MEDIUM

EPSS

24.6% (98th percentile)

NVD status

Modified

Published

1999-09-29