Lucene search

[email protected]CVE-1999-1591

HistoryOct 03, 2022 - 4:23 p.m.

CVE-1999-1591

2022-10-0316:23:41

[email protected]

web.nvd.nist.gov

microsoft

iis server 4.0

sp4

authentication bypass

remote attackers

cve-1999-1591.

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.145 Low

EPSS

Percentile

95.8%

JSON

Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not require authentication credentials under certain conditions, which allows remote attackers to bypass authentication requirements, as demonstrated by connecting via Microsoft Visual InterDev 6.0.

Affected configurations

NVD

Node

microsoftinternet_information_serverMatch4.0sp4

microsoftvisual_interdevMatch6.0

CPENameOperatorVersion
microsoft:internet_information_servermicrosoft internet information servereq4.0
microsoft:visual_interdevmicrosoft visual interdeveq6.0

CPE	Name	Operator	Version
microsoft:internet_information_server	microsoft internet information server	eq	4.0
microsoft:visual_interdev	microsoft visual interdev	eq	6.0

References

archives.neohapsis.com/archives/ntbugtraq/1998-1999/msg00276.html

archives.neohapsis.com/archives/ntbugtraq/1998-1999/msg00277.html

www.securityfocus.com/bid/190

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.145 Low

EPSS

Percentile

95.8%

JSON

Related for CVE-1999-1591

nvd1 cvelist1