Lucene search

[email protected]CVE-1999-0861

HistoryJan 04, 2000 - 5:00 a.m.

CVE-1999-0861

2000-01-0405:00:00

CWE-362

[email protected]

web.nvd.nist.gov

cve-1999-0861

ssl isapi

plaintext leakage

iis servers

6.7 Medium

AI Score

Confidence

Low

2.6 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

50.3%

JSON

Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext.

Affected configurations

NVD

Node

microsoftcommercial_internet_systemMatch2.0

microsoftcommercial_internet_systemMatch2.5

microsoftinternet_information_serverMatch4.0

microsoftsite_serverMatch3.0

microsoftsite_server_commerceMatch3.0

CPENameOperatorVersion
microsoft:commercial_internet_systemmicrosoft commercial internet systemeq2.0
microsoft:commercial_internet_systemmicrosoft commercial internet systemeq2.5
microsoft:internet_information_servermicrosoft internet information servereq4.0
microsoft:site_servermicrosoft site servereq3.0
microsoft:site_server_commercemicrosoft site server commerceeq3.0

CPE	Name	Operator	Version
microsoft:commercial_internet_system	microsoft commercial internet system	eq	2.0
microsoft:commercial_internet_system	microsoft commercial internet system	eq	2.5
microsoft:internet_information_server	microsoft internet information server	eq	4.0
microsoft:site_server	microsoft site server	eq	3.0
microsoft:site_server_commerce	microsoft site server commerce	eq	3.0

References

support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ244613

docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-053

6.7 Medium

AI Score

Confidence

Low

2.6 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

50.3%

JSON

Related for CVE-1999-0861

nvd1 cvelist1