Vulnerability Details CVE-2000-0649
IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.587
EPSS Ranking 98.1%
CVSS Severity
CVSS v2 Score 2.6
References
Products affected by CVE-2000-0649
-
cpe:2.3:a:microsoft:internet_information_server:3.0
-
cpe:2.3:a:microsoft:internet_information_server:4.0
-
cpe:2.3:a:microsoft:internet_information_services:2.0
-
cpe:2.3:a:microsoft:internet_information_services:5.0