CVE-1999-1538

The CVE-1999-1538 issue affects Microsoft IIS where, after upgrading IIS 2 or 3 to IIS 4, the ism.dll file is left in /scripts/iisadmin. This unmanaged file does not restrict access, enabling an unauthorized user to access sensitive server information, including the Administrator’s password, via ...