The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.
References
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:30
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.ciac.org/ciac/bulletins/j-054.shtml - | |
References | () http://www.osvdb.org/272 - | |
References | () https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-004 - | |
References | () https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-025 - | |
References | () https://www.securityfocus.com/bid/529 - |
Information
Published : 1999-07-19 04:00
Updated : 2024-11-20 23:30
NVD link : CVE-1999-1011
Mitre link : CVE-1999-1011
CVE.ORG link : CVE-1999-1011
JSON object : View
Products Affected
microsoft
- internet_information_server
- site_server
- data_access_components
- index_server
CWE
CWE-264
Permissions, Privileges, and Access Controls