Detections
Analytics
Microsoft IIS Malformed HTTP Request Header Remote DoS
medium Nessus Plugin ID 10119
Synopsis
The remote web server is affected by a remote denial of service vulnerability.Description
It was possible to crash the remote web server by sending a malformed header request. This flaw allows an attacker to shut down your web server, thus preventing legitimate users from connecting to your web server.Solution
Apply the patch referenced above.See Also
https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/1999/ms99-029
Plugin Details
Severity: Medium
ID: 10119
File Name: iis_malformed_request.nasl
Version: 1.51
Type: remote
Family: Web Servers
Published: 8/20/1999
Updated: 4/11/2022
Configuration: Enable paranoid mode, Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.4
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.9
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
Vulnerability Information
CPE: cpe:/a:microsoft:iis
Required KB Items: Settings/ParanoidReport
Exploit Available: true
Exploit Ease: Exploits are available
Vulnerability Publication Date: 8/11/1999
Reference Information
CVE: CVE-1999-0867
BID: 579