Details of VAR-200002-0025

ID

VAR-200002-0025

CVE

CVE-2000-0167

TITLE

Microsoft IIS 4.0 Pickup table of Contents DoS Vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200002-046

DESCRIPTION

IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory. The process inetinfo.exe will crash, resulting in a Dr. Watson access violation error. Restarting IIS is required in order to regain normal functionality

Trust: 1.17

sources: NVD: CVE-2000-0167 // BID: 1819

AFFECTED PRODUCTS

vendor:	microsoft	model:	internet information server	scope:	eq	version:	4.0	Trust: 1.6
vendor:	microsoft	model:	iis	scope:	eq	version:	4.0	Trust: 0.3

sources: BID: 1819 // CNNVD: CNNVD-200002-046 // NVD: CVE-2000-0167

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2000-0167
value:	LOW
Trust: 1.0
CNNVD:	CNNVD-200002-046
value:	LOW
Trust: 0.6

nvd@nist.gov:	CVE-2000-0167
severity:	LOW
baseScore:	2.1
vectorString:	AV:L/AC:L/AU:N/C:N/I:N/A:P
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	3.9
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0

sources: CNNVD: CNNVD-200002-046 // NVD: CVE-2000-0167

PROBLEMTYPE DATA

problemtype:

NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2000-0167

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-200002-046

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-200002-046

EXTERNAL IDS

db:	NVD	id:	CVE-2000-0167	Trust: 1.9
db:	NTBUGTRAQ	id:	20000215 CRASHING INETINFO.EXE BY USING A LONGFILENAME IN THE \MAILROOT\PICKUP DIRECTORY	Trust: 0.6
db:	CNNVD	id:	CNNVD-200002-046	Trust: 0.6
db:	BID	id:	1819	Trust: 0.3

sources: BID: 1819 // CNNVD: CNNVD-200002-046 // NVD: CVE-2000-0167

REFERENCES

url:

http://www.ntbugtraq.com/default.asp?pid=36&sid=1&a2=ind0002&l=ntbugtraq&f=&s=&p=8800

Trust: 2.9

sources: BID: 1819 // CNNVD: CNNVD-200002-046 // NVD: CVE-2000-0167

CREDITS

Posted to NTBugtraq on February 15, 2000 by Valentijn <iam@MY.NET>.

Trust: 0.9

sources: BID: 1819 // CNNVD: CNNVD-200002-046

SOURCES

db:	BID	id:	1819
db:	CNNVD	id:	CNNVD-200002-046
db:	NVD	id:	CVE-2000-0167

LAST UPDATE DATE

2024-11-22T23:13:06.107000+00:00

SOURCES UPDATE DATE

db:	BID	id:	1819	date:	2009-07-11T03:56:00
db:	CNNVD	id:	CNNVD-200002-046	date:	2005-10-20T00:00:00
db:	NVD	id:	CVE-2000-0167	date:	2024-11-20T23:31:52.280

SOURCES RELEASE DATE

db:	BID	id:	1819	date:	2000-02-15T00:00:00
db:	CNNVD	id:	CNNVD-200002-046	date:	2000-02-15T00:00:00
db:	NVD	id:	CVE-2000-0167	date:	2000-02-15T05:00:00