PT-1999-1528 · Microsoft · Remote Data Service (Rds) Datafactory+2

Publicado 1999-07-19 · Atualizado 2018-10-15 · CVE-1999-1011

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Data Access Components (MDAC) versions in IIS 3.x and 4.x

Description The issue concerns the Remote Data Service (RDS) DataFactory component, which exposes unsafe methods. This exposure allows remote attackers to execute arbitrary commands.

Recommendations For versions in IIS 3.x and 4.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-1999-1011

Produtos afetados

Iis

Data Access Components

Remote Data Service (Rds) Datafactory

Referências · 10

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/iis/msadc.rb · Exploit
• 🔥 https://exploit-db.com/exploits/19425 · Exploit
• 🔥 https://exploit-db.com/exploits/19424 · Exploit
• https://securityfocus.com/bid/529 · Nota
• http://osvdb.org/272 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-004 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-1011 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-025 · Nota
• http://ciac.org/ciac/bulletins/j-054.shtml · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1011 · Nota de Segurança