Description

IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain, aka the "Domain Resolution" vulnerability.

Remediation

References

CVE-1999-1233

Related Vulnerabilities

WordPress Plugin Syndication Links Cross-Site Scripting (1.0.2)

MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-5132)

WordPress Plugin Spider Calendar Cross-Site Scripting and SQL Injection Vulnerabilities (1.0.1)

OpenSSL Resource Management Errors Vulnerability (CVE-2011-4619)

WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.9)

Severity

High

Classification

CVE-1999-1233

Tags

Missing Update Known Vulnerabilities