Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
cve-2000-0649 — Script fo testing CVE-2000-0649 for Apache and MS IIS servers | Kitploit
Tools/GitHubGitHub/stevenvegar/cve-2000-0649
Vulnerability AnalysisExploitationInformation GatheringWeb SecurityPenetration Testing
GitHubstevenvegar/cve-2000-0649

cve-2000-0649

Script fo testing CVE-2000-0649 for Apache and MS IIS servers

View Repository
4 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2000-0649 for Apache

CVE-2000-0649 is a low risk vulnerability that can potentially disclose the internal IP addresses of the server from the Location parameter in the respose header. Official details are here:

  • Rapid7: https://www.rapid7.com/db/modules/auxiliary/scanner/http/iis_internal_ip/
  • CVE: https://www.cvedetails.com/cve/CVE-2000-0649/
  • NIST: https://nvd.nist.gov/vuln/detail/CVE-2000-0649

The vulnerability has been seen to be exploited on Microsoft IIS Servers, from 2.0 to 5.0 versions, but it hasn't been reported for Apache.

This script is made as PoC to extract local IP address of Apache 2.4.29 server, but it hasn't been tested on newer versions.

The following is a screenshot taken for this vulnerability.

Poc Tested

Reference:

Security Tracker Archives: https://securitytracker.com/id/1002188

Download Tool