PT-1999-1528 · Microsoft · Remote Data Service (Rds) Datafactory+2

Published 1999-07-19 · Updated 2018-10-15 · CVE-1999-1011

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Data Access Components (MDAC) versions in IIS 3.x and 4.x

Description The issue concerns the Remote Data Service (RDS) DataFactory component, which exposes unsafe methods. This exposure allows remote attackers to execute arbitrary commands.

Recommendations For versions in IIS 3.x and 4.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-264

Related Identifiers

CVE-1999-1011

Affected Products

Iis

Data Access Components

Remote Data Service (Rds) Datafactory

References · 10

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/iis/msadc.rb · Exploit
• 🔥 https://exploit-db.com/exploits/19425 · Exploit
• 🔥 https://exploit-db.com/exploits/19424 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-1011 · Security Note
• https://securityfocus.com/bid/529 · Note
• http://osvdb.org/272 · Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-004 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-1011 · Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-025 · Note
• http://ciac.org/ciac/bulletins/j-054.shtml · Note