PT-1996-1034 · Microsoft · Iis

Publicado 1996-02-25 · Atualizado 2020-11-23 · CVE-1999-0233

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IIS version 1.0

Description The issue allows users to execute arbitrary commands using .bat or .cmd files.

Recommendations For IIS version 1.0, consider restricting the execution of .bat and .cmd files to prevent arbitrary command execution until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-1999-0233

Produtos afetados

Iis

Referências · 5

• 🔥 https://exploit-db.com/exploits/20445 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0233 · Nota
• http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ155056 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-0233 · Nota de Segurança
• http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ148188 · Nota