CVE Catalog
CVE-1999-0448
MediumExploitation Probability (EPSS)
Very high risk24.19%
98th percentile - higher than 98% of all known CVEs
Summary
IIS 4.0 and Apache log HTTP request methods, regardless of their length, allowing a remote attacker to hide the actual URL they are requesting.
Risk Assessment
An attacker can exploit this vulnerability to conceal their actions, making it difficult to monitor and analyze network traffic, thus increasing the risk of unauthorized access.
Recommendation
It is recommended to update the server to the latest version and implement additional traffic monitoring mechanisms to minimize the risk associated with request hiding.
Original NVD description (English source)
IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request.