PT-1999-1048 · Microsoft · Iis+1

Published 1999-01-30 · Updated 2016-10-18 · CVE-1999-0360

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MS Site Server version 2.0 with IIS 4

Description The issue allows users to upload content, including ASP, to the target web site, thus enabling them to execute commands remotely.

Recommendations For MS Site Server version 2.0 with IIS 4, restrict access to uploading ASP content to prevent remote command execution. Consider disabling the upload feature until a proper fix is applied.

Exploit

Fix

Related Identifiers

CVE-1999-0360

Affected Products

Iis

Ms Site Server

References · 3

• 🔥 https://exploit-db.com/exploits/20305 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-0360 · Security Note
• http://marc.info/?l=bugtraq&m=91763097004101&w=2 · Note