CVE-1999-0012

HIGH

Microsoft FrontPage - Authentication Bypass via Long Filename

Title source: llm
STIX 2.1

Description

Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.

References (1)

Core 1
Core References
Third Party Advisory, VDB Entry x_refsource_misc
https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0012

Scores

CVSS v3 7.0
EPSS 0.1820
EPSS Percentile 96.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-290
Status published
Products (6)
microsoft/frontpage
microsoft/internet_information_server 4.0
microsoft/personal_web_server 4.0
netscape/enterprise_server 3.0
netscape/fasttrack_server 2.01
netscape/fasttrack_server 3.01
Published Feb 06, 1998
Tracked Since Feb 18, 2026