CVE Catalog

CVE-1999-0970

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

High risk
3.16%

86th percentile - higher than 86% of all known CVEs

Summary

The visadmin.exe program in OmniHTTPD allows a remote attacker to conduct a denial of service attack via a malformed URL, resulting in the creation of a large number of temporary files.

Risk Assessment

Such an attack can lead to server overload and unavailability for users, impacting the organization's operational continuity.

Recommendation

It is recommended to monitor and restrict access to the visadmin.exe program and implement filters for malformed URLs.

Original NVD description (English source)

The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which causes a large number of temporary files to be created.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS