VULNERABILITY INTELLIGENCE

CVE-2000-0649

CVSS score2.6 LOW
EPSS probability76.56%
CISA KEVNot currently listed
Published2000-07-13
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:N/A:N

Description

IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references