CVE Catalog
CVE-1999-0867
MediumExploitation Probability (EPSS)
Very high risk22.08%
97th percentile - higher than 97% of all known CVEs
Summary
Vulnerability in IIS 4.0 allows a denial of service attack by flooding the server with HTTP requests containing malformed headers.
Risk Assessment
An attacker can cause service unavailability, leading to application downtime and potential financial losses.
Recommendation
It is recommended to monitor HTTP traffic and implement filters that can block malformed headers.
Original NVD description (English source)
Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.