Filtered by vendor Microsoft
Subscriptions
Filtered by product Internet Information Server
Subscriptions
Total
111 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-1999-0229 | 1 Microsoft | 1 Internet Information Server | 2025-04-03 | N/A |
Denial of service in Windows NT IIS server using ..\.. | ||||
CVE-1999-0253 | 1 Microsoft | 2 Internet Information Server, Internet Information Services | 2025-04-03 | N/A |
IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) in the URL. | ||||
CVE-1999-0278 | 1 Microsoft | 2 Internet Information Server, Windows Nt | 2025-04-03 | N/A |
In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL. | ||||
CVE-1999-0349 | 1 Microsoft | 1 Internet Information Server | 2025-04-03 | N/A |
A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands. | ||||
CVE-1999-0407 | 1 Microsoft | 1 Internet Information Server | 2025-04-03 | N/A |
By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system. | ||||
CVE-1999-0412 | 1 Microsoft | 2 Internet Information Server, Internet Information Services | 2025-04-03 | N/A |
In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension. | ||||
CVE-1999-0450 | 1 Microsoft | 2 Internet Information Server, Internet Information Services | 2025-04-03 | N/A |
In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe). | ||||
CVE-1999-0737 | 1 Microsoft | 1 Internet Information Server | 2025-04-03 | N/A |
The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. | ||||
CVE-1999-0738 | 1 Microsoft | 1 Internet Information Server | 2025-04-03 | N/A |
The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. | ||||
CVE-1999-0739 | 1 Microsoft | 1 Internet Information Server | 2025-04-03 | N/A |
The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. | ||||
CVE-1999-0777 | 1 Microsoft | 2 Commercial Internet System, Internet Information Server | 2025-04-03 | N/A |
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions. |