7.1
CVSSv2

CVE-1999-0725

Published: 19/08/1999 Updated: 07/11/2023
CVSS v2 Base Score: 7.1 | Impact Score: 6.9 | Exploitability Score: 8.6
VMScore: 715
Vector: AV:N/AC:M/Au:N/C:C/I:N/A:N

Vulnerability Summary

When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote malicious user to view the source code of certain files, a.k.a. "Double Byte Code Page".

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft internet information server 3.0

microsoft internet information server 4.0

Exploits

source: wwwsecurityfocuscom/bid/477/info This vulnerability could allow a web site viewer to obtain the source code for asp and similar files if the server's default language (Input Locale) is set to Chinese, Japanese or Korean How this works is as follows: IIS checks the extension of the requested file to see if it needs to do any pr ...