Vulnerability Details CVE-1999-1035
IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via a malformed GET request, aka the IIS "GET" vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.181
EPSS Ranking 94.8%
CVSS Severity
CVSS v2 Score 5.0
References
- http://support.microsoft.com/support/kb/articles/q192/2/96.asp
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-019
- https://exchange.xforce.ibmcloud.com/vulnerabilities/1823
- http://support.microsoft.com/support/kb/articles/q192/2/96.asp
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-019
- https://exchange.xforce.ibmcloud.com/vulnerabilities/1823
Products affected by CVE-1999-1035
-
cpe:2.3:a:microsoft:internet_information_server:3.0
-
cpe:2.3:a:microsoft:internet_information_server:4.0