BlackKite: Home
Menu

PUBLISHED DATE: November 14, 2000CVE-2000-0858:
Denial of Service Vulnerability

CVSS:
5
EPSS:
2039.80%
Exploitability:
10
In KEV:
No
Description

Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a series of malformed requests which cause INETINFO.EXE to fail, aka the "Invalid URL" vulnerability.

Products
Questions to Ask Vendors
  1. Can you confirm whether your systems are affected by CVE-2000-0858, and if so, what steps are you currently taking to mitigate this vulnerability?
  2. What is your estimated timeline for fully resolving CVE-2000-0858 in your products or services, and how will you communicate updates on this issue to us as your customer?
Recommended Actions
References

Ready to get results you can trust?