PT-1999-1456 · Microsoft · Site Server

Publicado 1999-09-10 · Atualizado 2018-10-12 · CVE-1999-0910

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Site Server and Commercial Internet System (MCIS) (affected versions not specified)

Description The issue is related to the fact that Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie. This could allow the cookie to be cached by a proxy and inadvertently used by a different user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-1999-0910

Produtos afetados

Site Server

Referências · 3

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-035 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-0910 · Nota de Segurança
• http://securityfocus.com/bid/625 · Nota