Back

CVE-2000-0408

IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extension Data in URL" vulnerability.

Published: May 11, 2000 Modified: Apr 16, 2026

CVSS Metrics

Affected Products (2)

Vendor Product Version
microsoft internet_information_server 4.0
microsoft internet_information_services 5.0

GitHub Security Advisory GHSA-wx3j-8h4r-qj57

IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that...

Risk Scores

CVSS Score 5.0 / 10
EPSS Score 74.02%

Top 1% most likely to be exploited

Threat Score 52.2 / 100

Data Sources

NVD EPSS GitHub