Test ID:	1.3.6.1.4.1.25623.1.0.10406
Category:	Denial of Service
Title:	IIS Malformed Extension Data in URL
Summary:	NOSUMMARY
Description:	Description: It was possible to make IIS use 100% of the CPU by sending it malformed extension data in the URL requested, preventing him to serve web pages to legitimate clients. Solution : Microsoft has made patches available at : - For Internet Information Server 4.0: http://www.microsoft.com/Downloads/Release.asp?ReleaseID=20906 - For Internet Information Server 5.0: http://www.microsoft.com/Downloads/Release.asp?ReleaseID=20904 Risk factor : High
Cross-Ref:	BugTraq ID: 1190 Common Vulnerability Exposure (CVE) ID: CVE-2000-0408 http://www.securityfocus.com/bid/1190 http://www.ussrback.com/labs40.html Microsoft Security Bulletin: MS00-030 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-030 Microsoft Knowledge Base article: Q260205 http://www.microsoft.com/technet/support/kb.asp?ID=260205 XForce ISS Database: iis-url-extension-data-dos
Copyright	This script is Copyright (C) 2000 Renaud Deraison

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.