CVE Catalog
CVE-1999-0449
HighExploitation Probability (EPSS)
Very high risk46.00%
99th percentile - higher than 99% of all known CVEs
Summary
The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query.asp, or (3) search.asp scripts.
Risk Assessment
Attackers can overload the server, leading to performance degradation or complete service interruption.
Recommendation
It is recommended to restrict access to the mentioned scripts and monitor server load to detect potential attacks.
Original NVD description (English source)
The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query.asp, or (3) search.asp scripts.