CVE-1999-0449

HighCVSS 7.8/10Last modified Jun 16, 2026

Description

The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query.asp, or (3) search.asp scripts.

Metrics

CVSS 2.0 7.8/10AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected software

No affected versions have been published.

Timeline

Published
Jan 26, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-04507.5In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).CVE-1999-04512.1Denial of service in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port.CVE-1999-045210.0A service or application has a backdoor password that was placed there by the developer.CVE-1999-04535.0An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP).CVE-1999-045410.0A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool suchCVE-1999-04557.5The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, whCVE-1999-04577.2Linux ftpwatch program allows local users to gain root privileges.CVE-1999-04582.1L0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information.CVE-1999-04594.6Local users can perform a denial of service in Alpha Linux, using MILO to force a reboot.CVE-1999-04602.1Buffer overflow in Linux autofs module through long directory names allows local users to perform a denial of service.CVE-1999-046110.0Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a soCVE-1999-04627.2suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid