Summary
generated automatically from NVD dataCVE-1999-0229 affects Microsoft Internet Information Server (IIS) running on Windows NT. A remote attacker can trigger a denial of service by sending requests that use ..\.. directory traversal sequences. The flaw affects availability only, with no impact on confidentiality or integrity, and it carries a CVSS v2.0 score of 5.0 (MEDIUM).
NVD description
Denial of service in Windows NT IIS server using ..\..
EPSS · FIRST.org
5.9%probability of exploitation in the next 30 days
Higher than 93% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-29, recomputed daily by FIRST.org.
CVSS v2.0 Score
Information
- Published
- 12 mai 1999
- Updated
- 16 juin 2026
- Status
- Modified
- Source
- cve@mitre.org
Affected products
Weaknesses (CWE)
Similar CVEs
Other vulnerabilities of type
Know which CVEs hit the versions you run.
Add the product and its version: cveo.tech lists the CVEs that affect it right away, then alerts you by email when a new one affects it — including before NVD has finished its analysis. Free, an account is all it takes.