PT-1999-1048 · Microsoft · Iis+1

Publicado 1999-01-30 · Atualizado 2016-10-18 · CVE-1999-0360

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MS Site Server version 2.0 with IIS 4

Description The issue allows users to upload content, including ASP, to the target web site, thus enabling them to execute commands remotely.

Recommendations For MS Site Server version 2.0 with IIS 4, restrict access to uploading ASP content to prevent remote command execution. Consider disabling the upload feature until a proper fix is applied.

Exploit

Correção

Identificadores relacionados

CVE-1999-0360

Produtos afetados

Iis

Ms Site Server

Referências · 3

• 🔥 https://exploit-db.com/exploits/20305 · Exploit
• http://marc.info/?l=bugtraq&m=91763097004101&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-0360 · Nota de Segurança