Executive Summary

Informations
Name CVE-2000-0649 First vendor Publication 2000-07-13
Vendor Cve Last vendor Modification 2020-11-23

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:H/Au:N/C:P/I:N/A:N)
Cvss Base Score 2.6 Attack Range Network
Cvss Impact Score 2.9 Attack Complexity High
Cvss Expoit Score 4.9 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0649

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-200 Information Exposure

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 4

OpenVAS Exploits

Date Description
2005-11-03 Name : Private IP address leaked in HTTP headers
File : nvt/iis_nat.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
630 Microsoft IIS Multiple Malformed Header Field Internal IP Address Disclosure

Microsoft IIS contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when attempting to access an area protected via basic HTTP authentication without providing realm information, making a request without a host: header, or by trying to access a resource that has been moved (302). This may disclose the internal IP address or network name in the response header resulting in a loss of confidentiality.

Nessus® Vulnerability Scanner

Date Description
2001-09-14 Name : This web server leaks a private IP address through its HTTP headers.
File : iis_nat.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
BID http://www.securityfocus.com/bid/1499
NTBUGTRAQ http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0025.html

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
Date Informations
2024-02-02 01:01:26
  • Multiple Updates
2024-02-01 12:01:13
  • Multiple Updates
2023-09-05 12:01:23
  • Multiple Updates
2023-09-05 01:01:04
  • Multiple Updates
2023-09-02 12:01:24
  • Multiple Updates
2023-09-02 01:01:04
  • Multiple Updates
2023-08-12 12:01:43
  • Multiple Updates
2023-08-12 01:01:05
  • Multiple Updates
2023-08-11 12:01:27
  • Multiple Updates
2023-08-11 01:01:05
  • Multiple Updates
2023-08-06 12:01:19
  • Multiple Updates
2023-08-06 01:01:05
  • Multiple Updates
2023-08-04 12:01:23
  • Multiple Updates
2023-08-04 01:01:05
  • Multiple Updates
2023-07-14 12:01:21
  • Multiple Updates
2023-07-14 01:01:06
  • Multiple Updates
2023-03-29 01:01:20
  • Multiple Updates
2023-03-28 12:01:10
  • Multiple Updates
2022-10-11 12:01:13
  • Multiple Updates
2022-10-11 01:00:58
  • Multiple Updates
2021-05-04 12:01:10
  • Multiple Updates
2021-04-22 01:01:23
  • Multiple Updates
2020-11-24 09:22:42
  • Multiple Updates
2020-11-24 00:22:45
  • Multiple Updates
2020-05-23 13:16:43
  • Multiple Updates
2020-05-23 00:14:25
  • Multiple Updates
2018-10-31 00:19:40
  • Multiple Updates
2016-06-28 14:53:16
  • Multiple Updates
2014-02-17 10:23:10
  • Multiple Updates
2013-05-11 12:00:52
  • Multiple Updates