Description
IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
History
Mon, 14 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-01T16:41:44.992Z
Reserved: 1999-06-07T00:00:00.000Z
Link: CVE-1999-0448
No data.
Status : Modified
Published: 1999-01-01T05:00:00.000
Modified: 2026-04-16T00:27:16.627
Link: CVE-1999-0448
No data.
OpenCVE Enrichment
No data.
Weaknesses