Lucene search

K
cve[email protected]CVE-1999-1011
HistoryJun 02, 2000 - 4:00 a.m.

CVE-1999-1011

2000-06-0204:00:00
CWE-264
web.nvd.nist.gov
44
2
microsoft
data access components
iis
remote data service
mdac
unsafe methods
command execution

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.683 Medium

EPSS

Percentile

98.0%

The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.

Affected configurations

NVD
Node
microsoftdata_access_componentsMatch1.5
OR
microsoftdata_access_componentsMatch2.0
OR
microsoftdata_access_componentsMatch2.1
OR
microsoftindex_serverMatch2.0
OR
microsoftinternet_information_serverMatch3.0
OR
microsoftinternet_information_serverMatch4.0
OR
microsoftsite_serverMatch3.0

Social References

More

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.683 Medium

EPSS

Percentile

98.0%