CVE-1999-0970

CVE-1999-0970 describes a denial-of-service vulnerability in OmniHTTPD's visadmin.exe program, affecting Omnicron OmniHTTPd versions 1.1 and 2.0 Alpha 1. A remote, unauthenticated attacker can trigger this by sending a malformed URL, leading to the creation of numerous temporary files and system resource exhaustion. Rated as Medium severity (CVSS 5.0), this vulnerability is easily exploitable over the network with low attack complexity, resulting in a partial denial of service. While not observed in active exploitation and not listed in CISA's KEV catalog, public exploit code exists on ExploitDB, though there is no evidence of broader community discussion or media coverage.