CVE-2000-0858: Microsoft Internet Information Server
Medium severity, CVSS 5.0. EPSS: 18.8% chance of exploitation in the next 30 days.
Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a series of malformed requests which cause INETINFO.EXE to fail, aka the "Invalid URL" vulnerability.
Affected products
Published 2000-11-14. Last modified 2026-06-16.