CVE-2000-0167: Low severity Microsoft Internet Information Server vulnerability
IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Microsoft Internet Information Servicesfrom your environment.If SMTP functionality is not required, uninstall the IIS/SMTP component to eliminate exposure to this issue.
- Configuration
Set NTFS ACLs on the SMTP pickup directory so that only administrators and the IIS/SMTP service account can create or modify files. Prevent standard/local users from writing files into the pickup directory (thereby stopping creation of long .txt.eml files).
IIS SMTP (Inetinfo.exe) pickup directory filesystem permissions = restrict write to administrators and service account - Compensating control
Implement host-based monitoring and alerts for the pickup directory (e.g., detect and alert on creation of files with very long filenames or with a .txt.eml extension) and restrict local user accounts that can log on to the host.
- Operational
If a denial-of-service occurs, remove the offending mail file(s) with long names and .txt.eml extension from the pickup directory and restart the inetinfo.exe/SMTP service to restore normal operation.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0167?
CVE-2000-0167 is categorized as a denial of service vulnerability affecting IIS 4.0.
How do I fix CVE-2000-0167?
To mitigate CVE-2000-0167, avoid allowing users to create files with excessively long names in the pickup directory.
Which software versions are affected by CVE-2000-0167?
CVE-2000-0167 affects Microsoft Internet Information Server version 4.0.
Can CVE-2000-0167 be exploited remotely?
CVE-2000-0167 is a local vulnerability, meaning it can only be exploited by local users on the affected system.
What are the consequences of CVE-2000-0167 exploitation?
Exploitation of CVE-2000-0167 can lead to a denial of service by disrupting the mail processing functionality of IIS.