CVE-2000-0649

Published Jul 12, 2000·Updated Jun 16, 2026

NVD Description

IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined.

Public Exploits & PoCs3 found

PoC: CVE-2000-0649

Test for CVE-2000-0649, and return an IP address if vulnerable

PoC: PoC-CVE-2000-0649

A small tool to create a PoC for CVE-2000-0649.

PoC: cve-2000-0649

Script fo testing CVE-2000-0649 for Apache and MS IIS servers

CVSS Vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free