CVE-2000-0408

Medium

Published: 11/05/2000(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

57.96%

99th percentile - higher than 99% of all known CVEs

Summary

IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, known as the 'Malformed Extension Data in URL' vulnerability.

Risk Assessment

Attackers can exploit this vulnerability to disrupt access to IIS services, potentially leading to downtime for web applications.

Recommendation

It is recommended to upgrade to a newer version of IIS and to monitor server logs for suspicious URL requests.

Original NVD description (English source)

IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extension Data in URL" vulnerability.