CVE-1999-1233: IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does n
Summary
IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain, aka the "Domain Resolution" vulnerability.
Severity
UNKNOWN
Source Attribution
Source: NVD · Updated: 2026-08-21T04:30:53.017Z · Confidence: high
Impact
Based on CVSS vector: n/a — assess confidentiality, integrity, and availability impact via the official vector documentation.
Affected Software
Fix
Upgrade affected software to the fixed version identified above. Apply vendor patches and monitor advisories before exposed systems go unpatched.
References
- http://support.microsoft.com/support/kb/articles/Q241/5/62.asp
- http://www.securityfocus.com/bid/657
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-039
- https://exchange.xforce.ibmcloud.com/vulnerabilities/3306
- http://support.microsoft.com/support/kb/articles/Q241/5/62.asp
- http://www.securityfocus.com/bid/657
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-039
- https://exchange.xforce.ibmcloud.com/vulnerabilities/3306