CVE-1999-0874

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-119

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jun 16, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-08757.5DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes.CVE-1999-087610.0Buffer overflow in Internet Explorer 4.0 via EMBED tag.CVE-1999-08774.3Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME.CVE-1999-087810.0Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR.CVE-1999-087910.0Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file.CVE-1999-08805.0Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.CVE-1999-08815.0Falcon web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-1999-08825.0Falcon web server allows remote attackers to determine the absolute path of the web root via long file names.CVE-1999-088310.0Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine.CVE-1999-08845.0The Zeus web server administrative interface uses weak encryption for its passwords.CVE-1999-08853.6Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL.CVE-1999-08869.0The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager.
CVE-1999-0874: Critical severity, CVSS 10.0 | Vulnix