PT-1999-1092 · Microsoft · Iis

Publicado 1999-02-09 · Atualizado 2016-10-18 · CVE-1999-0407

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IIS version 4.0

Description The issue concerns a virtual directory /IISADMPWD in IIS 4.0 that contains files which can be utilized as proxies for brute force password attacks or to identify valid users on the system.

Recommendations For IIS version 4.0, consider removing or restricting access to the virtual directory /IISADMPWD to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-1999-0407

Produtos afetados

Iis

Referências · 4

• http://marc.info/?l=bugtraq&m=91983486431506&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-0407 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0407 · Nota
• http://marc.info/?l=bugtraq&m=92000623021036&w=2 · Nota