CVE-2000-0408

IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extension Data in URL" vulnerability.

Affected products

Iis

Microsoft Internet Information Server

= 4.0

Microsoft Internet Information Services

= 5.0

Fix

Available

CVSS 2.0

5.0 MEDIUM

EPSS

58.0% (99th percentile)

NVD status

Modified

Published

2000-07-12