CVE-2000-0649
IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic…
published August 3, 2000
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 99.5th percentile for exploit probability.
What it is
IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.76558 · 99.5th percentile
- Published
- 2000-08-03T04:00Z
EPSS history
Timeline