CVE-1999-0867

Description

Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.

Affected products

• Microsoft / commercial_internet_system2.0 – 2.0
• Microsoft / commercial_internet_system2.5 – 2.5
• Microsoft / internet_information_server4.0 – 4.0
• Microsoft / site_server3.0 – 3.0

Exploits & proofs of concept

• exploit-dbMicrosoft Commercial Internet System 2.0/2.5 / IIS 4.0 / Site Server Commerce Edition 3.0 alpha/3.0 - Denial of Serviceby Nobuo Miwa

References

• MISChttp://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238349
• MISChttp://www.ciac.org/ciac/bulletins/j-058.shtml
• MISChttps://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-029
• MISChttp://www.securityfocus.com/bid/579