Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 19/02/1999 Updated: 23/11/2020

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Subscribe to Internet Information Services

In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft internet information services 2.0
microsoft internet information server 3.0
microsoft internet information server 4.0

source: wwwsecurityfocuscom/bid/501/info IIS and potentially other NT web servers have a vulnerability that could allow arbitrary code to be run as SYSTEM This works because of the way the server calls the GetExtensionVersion() function the first time an ISAPI extension is loaded Any user able to put a CGI script in the web structure c ...

NVD-CWE-Other http://www.securityfocus.com/bid/501 https://nvd.nist.gov https://www.exploit-db.com/exploits/19376/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-1999-0412

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect