cve/2000/CVE-2000-0649.md

CVE-2000-0649

Description

IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined.

POC

Reference

No PoCs from references.

Github

• https://github.com/0xNVAN/win-iisadmin
• https://github.com/ARPSyndicate/cvemon
• https://github.com/CVEDB/PoC-List
• https://github.com/JimboJimbabwe/HackGPTV2
• https://github.com/amtzespinosa/lord-of-the-root-walkthrough
• https://github.com/hanmin0512/Web-hacking-LAB
• https://github.com/n-ventory/win-iisadmin
• https://github.com/rafaelh/CVE-2000-0649
• https://github.com/stevenvegar/cve-2000-0649