CVE-1999-0777

Microsoft Commercial Internet System and Internet Information Server - Unauthenticated Arbitrary File Read and Delete

Title source: llm
STIX 2.1

Description

IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.

References (4)

Core 4
Core References
Vendor Advisory vendor-advisory x_refsource_mskb
http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ241407
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/658
Vendor Advisory vendor-advisory x_refsource_mskb
http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ242559

Scores

EPSS 0.1199
EPSS Percentile 95.7%

Details

CWE
CWE-264
Status published
Products (2)
microsoft/commercial_internet_system 2.5
microsoft/internet_information_server 4.0
Published Sep 23, 1999
Tracked Since Feb 18, 2026