CVEvulnerability
CVE-1999-1011
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 1999-07-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.
Affected configurations
• microsoft data access components 1.5
• microsoft data access components 2.0
• microsoft data access components 2.1
• microsoft index server 2.0
• microsoft internet information server 3.0
• microsoft internet information server 4.0
• microsoft site server 3.0
Related
Weakness · not in database (1)
References
- http://www.ciac.org/ciac/bulletins/j-054.shtml www.ciac.org
- http://www.osvdb.org/272 www.osvdb.org
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-004 docs.microsoft.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-025 docs.microsoft.com
- https://www.securityfocus.com/bid/529 www.securityfocus.com
- http://www.ciac.org/ciac/bulletins/j-054.shtml www.ciac.org
- http://www.osvdb.org/272 www.osvdb.org
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-004 docs.microsoft.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-025 docs.microsoft.com
- https://www.securityfocus.com/bid/529 www.securityfocus.com