CVE-1999-1148

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via many passive (PASV) connections at the same time.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Dec 31, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-11565.0BisonWare FTP Server 4.1 and earlier allows remote attackers to cause a denial of service via a malformed PORT command that contains a non-n CVE-1999-11575.0Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, CVE-1999-11637.5Vulnerability in HP Series 800 S/X/V Class servers allows remote attackers to gain access to the S/X/V Class console via the Service Support CVE-1999-11645.0Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL header CVE-1999-11657.2GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privile CVE-1999-11667.2Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain root privileges by accessing and modifying CVE-1999-11676.4Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pa CVE-1999-11687.2install.iss installation script for Internet Security Scanner (ISS) for Linux, version 5.3, allows local users to change the permissions of CVE-1999-11695.0nobo 1.2 allows remote attackers to cause a denial of service (crash) via a series of large UDP packets.CVE-1999-11704.6IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.CVE-1999-11714.6IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920 CVE-1999-11725.0By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of other users when the ca