PT-1997-1112 · Microsoft · Iis

Published 1997-01-01 · Updated 2022-08-17 · CVE-1999-0253

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IIS version 3.0

Description The issue allows remote intruders to read source code for ASP programs. This is achieved by using a %2e instead of a . (dot) in the URL.

Recommendations For IIS version 3.0, apply the necessary configuration changes to prevent ASP source code disclosure, such as properly handling URL-encoded characters.

Fix

Related Identifiers

CVE-1999-0253

Affected Products

Iis

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-1999-0253 · Security Note
• http://securityfocus.com/bid/1814 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0253 · Note