Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-1999-0725
HistoryJan 04, 2000 - 5:00 a.m.

CVE-1999-0725

2000-01-0405:00:00
CWE-16
mitre
web.nvd.nist.gov
30
iis
source code exposure
chinese
korean
japanese
double byte code page
cve-1999-0725
nvd.

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:N/A:N

AI Score

7.3

Confidence

Low

EPSS

0.005

Percentile

76.5%

JSON

When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. “Double Byte Code Page”.

Affected configurations

Nvd
Node
microsoftinternet_information_serverMatch3.0ja
OR
microsoftinternet_information_serverMatch3.0ko
OR
microsoftinternet_information_serverMatch3.0zh
OR
microsoftinternet_information_serverMatch4.0ja
OR
microsoftinternet_information_serverMatch4.0ko
OR
microsoftinternet_information_serverMatch4.0zh
VendorProductVersionCPE
microsoftinternet_information_server3.0cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:ja:*:*:*:*
microsoftinternet_information_server3.0cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:ko:*:*:*:*
microsoftinternet_information_server3.0cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:zh:*:*:*:*
microsoftinternet_information_server4.0cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:ja:*:*:*:*
microsoftinternet_information_server4.0cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:ko:*:*:*:*
microsoftinternet_information_server4.0cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:zh:*:*:*:*

Related

nvd 1
cvelist 1
exploitdb 1
nvd
nvd
CVE-1999-0725
1999-08-19 04:00:00
cvelist
cvelist
CVE-1999-0725
2000-01-04 05:00:00
exploitdb
exploitdb
Microsoft IIS 3.0/4.0 - Double Byte Code Page
1999-06-24 00:00:00

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:N/A:N

AI Score

7.3

Confidence

Low

EPSS

0.005

Percentile

76.5%

JSON
Related for CVE-1999-0725
nvd1cvelist1exploitdb1