Ocean12 ASP Guestbook Manager Database Download

The remote server is running Ocean12 GuestBook, a set of scripts to manage an interactive guestbook. An attacker may download the database 'o12guest.mdb' and use it to extract the password of the admninistrator of these CGIs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: From:...

CVE-1999-1538

When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allows an unauthorized user to gain access to sensitive server information, including the Administrator's password...