Lucene search

K
cveMitreCVE-1999-0360
HistoryFeb 04, 2000 - 5:00 a.m.

CVE-1999-0360

2000-02-0405:00:00
mitre
web.nvd.nist.gov
26
cve-1999-0360
site server 2.0
iis 4
remote command execution
content upload
nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

17.7%

MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely.

Affected configurations

Nvd
Node
microsoftsite_serverMatch2.0
VendorProductVersionCPE
microsoftsite_server2.0cpe:2.3:a:microsoft:site_server:2.0:*:*:*:*:*:*:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

17.7%

Related for CVE-1999-0360