Description

IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a large number of / (forward slash) characters.

Remediation

References

CVE-1999-1223

Related Vulnerabilities

WordPress Plugin Easy Forms for MailChimp Local File Inclusion (6.0.5.5)

WordPress Plugin Personalized WooCommerce Cart Page Cross-Site Request Forgery (2.4)

Jenkins Improper Access Control Vulnerability (CVE-2015-5325)

WordPress Plugin Stop User Enumeration Cross-Site Scripting (1.3.7)

Apache Traffic Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-33934)

Severity

Medium

Classification

CVE-1999-1223

Tags

Missing Update Known Vulnerabilities