CVE-1999-0874: Buffer Overflow

Published Jun 16, 1999

Updated

Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.

Affected Software

4 affected components

Microsoft Internet Information Server=4.0

Microsoft Windows NT=4.0

Microsoft Windows NT

Microsoft Windows 2000

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Remove
Remove IIS 4.0 from your environment.
If feasible, remove or replace IIS 4.0 (uninstall or migrate services to a supported/updated web server) to eliminate exposure to this vulnerability.
Configuration
Disable or remove the script/handler mappings for .HTR, .IDC, and .STM file extensions in IIS 4.0 so the server will not process requests for these file types.
IIS 4.0 file extension handlers (.HTR, .IDC, .STM) = disabled or remove mappings
Compensating control
Block or filter HTTP requests targeting URLs ending in .HTR, .IDC, or .STM at the network perimeter (firewall, WAF, or reverse proxy) to prevent malformed requests from reaching IIS 4.0.
Operational
Monitor IIS access logs for requests to .HTR, .IDC, and .STM files and investigate any occurrences. Apply any vendor-supplied patch or update addressing this issue as soon as it becomes available.

Event History

Jun 16, 1999

CVE Published

04:00 AM

Data Sourced

via NVD·04:00 AM

DescriptionSeverityWeaknessAffected Software

Jun 2, 2000

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-1999-0874?

CVE-1999-0874 is considered a high-severity vulnerability due to its potential to cause denial of service.

How do I fix CVE-1999-0874?

To fix CVE-1999-0874, it is recommended to upgrade to a newer version of Internet Information Server that does not have this vulnerability.

Who is affected by CVE-1999-0874?

CVE-1999-0874 affects users of Microsoft Internet Information Server 4.0 and certain versions of Microsoft Windows NT and Windows 2000 that rely on this server.

What type of attack exploits CVE-1999-0874?

CVE-1999-0874 is exploited through buffer overflow attacks using malformed HTTP requests targeting specific file extensions.

Can CVE-1999-0874 lead to data loss?

While CVE-1999-0874 primarily causes denial of service, it may potentially lead to data loss if the service is disrupted during critical operations.