Lucene search

[email protected]CVE-1999-0412

HistorySep 29, 1999 - 4:00 a.m.

CVE-1999-0412

1999-09-2904:00:00

[email protected]

web.nvd.nist.gov

iis

web server

attacker

system

isapi extension

cve-1999-0412

nvd.

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.5%

JSON

In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.

Affected configurations

NVD

Node

microsoftinternet_information_serverMatch3.0

microsoftinternet_information_serverMatch4.0

microsoftinternet_information_servicesMatch2.0

CPENameOperatorVersion
microsoft:internet_information_servermicrosoft internet information servereq3.0
microsoft:internet_information_servermicrosoft internet information servereq4.0
microsoft:internet_information_servicesmicrosoft internet information serviceseq2.0

CPE	Name	Operator	Version
microsoft:internet_information_server	microsoft internet information server	eq	3.0
microsoft:internet_information_server	microsoft internet information server	eq	4.0
microsoft:internet_information_services	microsoft internet information services	eq	2.0

References

www.securityfocus.com/bid/501

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.5%

JSON

Related for CVE-1999-0412

cvelist1 nvd1