CVE-2000-0649

Опубликовано: 13 июл. 2000

Источник: nvd

CVSS2: 2.6

EPSS Средний

Описание

IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined.

Ссылки

http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0025.html
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/1499
Exploit
Patch
Vendor Advisory
http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0025.html
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/1499
Exploit
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_information_services:2.0:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.62987

Средний

2.6 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-rv5h-jg6x-f3vp

github

почти 4 года назад