CVE-1999-1233
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
31/12/1999
Last modified:
03/04/2025
Description
IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain, aka the "Domain Resolution" vulnerability.
Impact
Base Score 2.0
7.50
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://support.microsoft.com/support/kb/articles/Q241/5/62.asp
- http://www.securityfocus.com/bid/657
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-039
- https://exchange.xforce.ibmcloud.com/vulnerabilities/3306
- http://support.microsoft.com/support/kb/articles/Q241/5/62.asp
- http://www.securityfocus.com/bid/657
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-039
- https://exchange.xforce.ibmcloud.com/vulnerabilities/3306