CVE Catalog

CVE-1999-0229

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
5.87%

92th percentile - higher than 92% of all known CVEs

Summary

Vulnerability in Windows NT IIS server allows a DoS attack by sending a request containing the '..\.' sequence.

Risk Assessment

The attack can cause the web server to become unavailable, disrupting hosted applications and services.

Recommendation

Install the appropriate security patch from Microsoft or upgrade to a newer version of the system that is not vulnerable to this attack.

Original NVD description (English source)

Denial of service in Windows NT IIS server using ..\..

Vulnerability data from NVD (NIST) · CISA KEV · EPSS