Description

The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query.asp, or (3) search.asp scripts.

Remediation

References

CVE-1999-0449

Related Vulnerabilities

Jboss EAP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-10862)

MySQL CVE-2021-2171 Vulnerability (CVE-2021-2171)

Ruby Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4464)

WordPress Plugin WP-Cumulus 'tagcloud.swf' Cross-Site Scripting (1.22)

WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Request Forgery (1.23.3)

Severity

High

Classification

CVE-1999-0449

Tags

Missing Update Known Vulnerabilities