PT-1996-1034 · Microsoft · Iis

Published 1996-02-25 · Updated 2020-11-23 · CVE-1999-0233

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IIS version 1.0

Description The issue allows users to execute arbitrary commands using .bat or .cmd files.

Recommendations For IIS version 1.0, consider restricting the execution of .bat and .cmd files to prevent arbitrary command execution until a patch is available.

Exploit

Fix

Related Identifiers

CVE-1999-0233

Affected Products

Iis

References · 5

• 🔥 https://exploit-db.com/exploits/20445 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-0233 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0233 · Note
• http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ155056 · Note
• http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ148188 · Note