Description

IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain, aka the "Domain Resolution" vulnerability.

Remediation

References

CVE-1999-1233

Related Vulnerabilities

Apache HTTP Server Numeric Errors Vulnerability (CVE-2006-3747)

Oracle JRE CVE-2013-5772 Vulnerability (CVE-2013-5772)

XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29521)

ownCloud Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2015-4716)

Liferay Portal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-42121)

Severity

High

Classification

CVE-1999-1233

Tags

Missing Update Known Vulnerabilities