PT-1999-1092 · Microsoft · Iis

Published 1999-02-09 · Updated 2016-10-18 · CVE-1999-0407

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IIS version 4.0

Description The issue concerns a virtual directory /IISADMPWD in IIS 4.0 that contains files which can be utilized as proxies for brute force password attacks or to identify valid users on the system.

Recommendations For IIS version 4.0, consider removing or restricting access to the virtual directory /IISADMPWD to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-1999-0407

Affected Products

Iis

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-1999-0407 · Security Note
• http://marc.info/?l=bugtraq&m=91983486431506&w=2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0407 · Note
• http://marc.info/?l=bugtraq&m=92000623021036&w=2 · Note