Security Vulnerabilities, CVEs, Published In July 1999 (Denial of service)

IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attackers to cause a denial of service (resource exhaustion) via SSL requests to the HTTPS port for normally unencrypted files, which will cause IIS to perform extra work to send the files over SSL.

Buffer overflow in AspUpload.dll in Persits Software AspUpload before 1.4.0.2 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument in the HTTP request.

Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory limits (e.g., as specified with rlimits) using mmap or shmget to allocate memory and cause page faults.

The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that includes the [ character.

Denial of service in various Windows systems via malformed, fragmented IGMP packets.

Denial of service in Samba NETBIOS name service daemon (nmbd).

Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of service via a large number of connection attempts to unresponsive systems.

Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake.

Denial of service in Windows NT Local Security Authority (LSA) through a malformed LSA request.

Denial of service in Gauntlet Firewall via a malformed ICMP packet.

Denial of service in Windows NT messenger service through a long username.