Sign-up

ID

VAR-200005-0053


CVE

CVE-2000-0408


TITLE

Microsoft IIS Service operation by handling invalid file extension (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2000-000032

DESCRIPTION

IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extension Data in URL" vulnerability. Restarting the application or waiting until the URL is processed will be required in order to regain normal functionality

Trust: 1.89

sources: NVD: CVE-2000-0408 // JVNDB: JVNDB-2000-000032 // BID: 1190

AFFECTED PRODUCTS

vendor:microsoftmodel:internet information serverscope:eqversion:4.0

Trust: 1.6

vendor:microsoftmodel:internet information servicesscope:eqversion:5.0

Trust: 1.6

vendor:microsoftmodel:iisscope:eqversion:5.0

Trust: 1.1

vendor:microsoftmodel:iisscope:eqversion:4.0

Trust: 1.1

vendor:microsoftmodel:internet information serverscope:eqversion:5.0

Trust: 0.6

vendor:microsoftmodel:iis alphascope:eqversion:4.0

Trust: 0.3

sources: BID: 1190 // JVNDB: JVNDB-2000-000032 // CNNVD: CNNVD-200005-046 // NVD: CVE-2000-0408

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2000-0408
value: MEDIUM

Trust: 1.0

NVD: CVE-2000-0408
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-200005-046
value: MEDIUM

Trust: 0.6

nvd@nist.gov: CVE-2000-0408
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

sources: JVNDB: JVNDB-2000-000032 // CNNVD: CNNVD-200005-046 // NVD: CVE-2000-0408

PROBLEMTYPE DATA

problemtype:NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2000-0408

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200005-046

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-200005-046

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2000-000032

PATCH
title:MS00-030url:http://www.microsoft.com/technet/security/bulletin/MS00-030.mspx
Trust: 0.8
title:MS00-030url:http://www.microsoft.com/japan/technet/security/Bulletin/MS06-030.mspx
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2000-000032

EXTERNAL IDS
db:BIDid:1190
Trust: 2.7
db:NVDid:CVE-2000-0408
Trust: 2.4
db:JVNDBid:JVNDB-2000-000032
Trust: 0.8
db:MSKBid:Q260205
Trust: 0.6
db:MSid:MS00-030
Trust: 0.6
db:CNNVDid:CNNVD-200005-046
Trust: 0.6
sources:
            
            
            BID: 1190 // 
            
            
            
            JVNDB: JVNDB-2000-000032 // 
            
            
            
            CNNVD: CNNVD-200005-046 // 
            
            
            
            NVD: CVE-2000-0408

REFERENCES
url:http://www.securityfocus.com/bid/1190
Trust: 3.4
url:http://www.ussrback.com/labs40.html
Trust: 2.6
url:http://www.microsoft.com/technet/support/kb.asp?id=260205
Trust: 2.6
url:https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-030
Trust: 2.0
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2000-0408
Trust: 0.8
url:http://nvd.nist.gov/nvd.cfm?cvename=cve-2000-0408
Trust: 0.8
url:http://www.microsoft.com/technet/security/bulletin/ms00-030.asp
Trust: 0.6
url:http://www.microsoft.com/technet/security/bulletin/fq00-030.asp
Trust: 0.3
url:http://support.microsoft.com/support/kb/articles/q260/2/05.asp?ln=en-us&sd=tech&fr=0
Trust: 0.3
sources:
            
            
            BID: 1190 // 
            
            
            
            JVNDB: JVNDB-2000-000032 // 
            
            
            
            CNNVD: CNNVD-200005-046 // 
            
            
            
            NVD: CVE-2000-0408

CREDITS
Discovered by USSR Labs <labs@ussrback.com> and publicized in a Microsoft Security Bulletin (MS00-0030).
Trust: 0.9
sources:
            
            
            BID: 1190 // 
            
            
            
            CNNVD: CNNVD-200005-046

SOURCES
db:BIDid:1190
db:JVNDBid:JVNDB-2000-000032
db:CNNVDid:CNNVD-200005-046
db:NVDid:CVE-2000-0408

LAST UPDATE DATE
2024-11-22T23:05:58.346000+00:00

SOURCES UPDATE DATE
db:BIDid:1190date:2000-05-11T00:00:00
db:JVNDBid:JVNDB-2000-000032date:2007-04-01T00:00:00
db:CNNVDid:CNNVD-200005-046date:2005-10-12T00:00:00
db:NVDid:CVE-2000-0408date:2024-11-20T23:32:26.240

SOURCES RELEASE DATE
db:BIDid:1190date:2000-05-11T00:00:00
db:JVNDBid:JVNDB-2000-000032date:2007-04-01T00:00:00
db:CNNVDid:CNNVD-200005-046date:2000-05-11T00:00:00
db:NVDid:CVE-2000-0408date:2000-05-11T04:00:00