## Description

IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain, aka the "Domain Resolution" vulnerability.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### microsoft - internet_information_server

Affected Versions:

- 4.0

## References

- http://support.microsoft.com/support/kb/articles/Q241/5/62.asp
  Patch Vendor Advisory
- http://www.securityfocus.com/bid/657
  Exploit Patch Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-039
- https://exchange.xforce.ibmcloud.com/vulnerabilities/3306
- http://support.microsoft.com/support/kb/articles/Q241/5/62.asp
  Patch Vendor Advisory
- http://www.securityfocus.com/bid/657
  Exploit Patch Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-039
- https://exchange.xforce.ibmcloud.com/vulnerabilities/3306

Neural Processor Active