CVE-1999-1011
high · 10The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.
10
CVSS
77.1%
EPSS (exploit prob.)
100th
EPSS percentile
1999-07-19
Published
AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-264
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | data_access_components | 1.5 |
| microsoft | data_access_components | 2.0 |
| microsoft | data_access_components | 2.1 |
| microsoft | index_server | 2.0 |
| microsoft | internet_information_server | 3.0 |
| microsoft | internet_information_server | 4.0 |
| microsoft | site_server | 3.0 |
Check a specific version with /api/v1/cve/match.
References
- http://www.ciac.org/ciac/bulletins/j-054.shtml
- http://www.osvdb.org/272
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-004
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-025
- https://www.securityfocus.com/bid/529
- http://www.ciac.org/ciac/bulletins/j-054.shtml
- http://www.osvdb.org/272
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-004
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-025
- https://www.securityfocus.com/bid/529
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-1999-1011