Lucene search
MitreCVE-1999-1011HistoryJun 02, 2000 - 4:00 a.m.
CVE-1999-1011
2000-06-0204:00:00
CWE-264
mitre
web.nvd.nist.gov
48
2
microsoft
data access components
iis
remote data service
mdac
unsafe methods
command execution
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.4
Confidence
Low
EPSS
0.683
Percentile
98.0%
The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.
Affected configurations
Node
microsoftdata_access_componentsMatch1.5
ORmicrosoftdata_access_componentsMatch2.0
ORmicrosoftdata_access_componentsMatch2.1
ORmicrosoftindex_serverMatch2.0
ORmicrosoftinternet_information_serverMatch3.0
ORmicrosoftinternet_information_serverMatch4.0
ORmicrosoftsite_serverMatch3.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | data_access_components | 1.5 | cpe:2.3:a:microsoft:data_access_components:1.5:*:*:*:*:*:*:* |
| microsoft | data_access_components | 2.0 | cpe:2.3:a:microsoft:data_access_components:2.0:*:*:*:*:*:*:* |
| microsoft | data_access_components | 2.1 | cpe:2.3:a:microsoft:data_access_components:2.1:*:*:*:*:*:*:* |
| microsoft | index_server | 2.0 | cpe:2.3:a:microsoft:index_server:2.0:*:*:*:*:*:*:* |
| microsoft | internet_information_server | 3.0 | cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:* |
| microsoft | internet_information_server | 4.0 | cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:* |
| microsoft | site_server | 3.0 | cpe:2.3:a:microsoft:site_server:3.0:*:*:*:*:*:*:* |
References
Social References
More
Related
nessus
nessus
Microsoft IIS MDAC RDS (msadcs.dll) Arbitrary Remote Command Execution
2000-04-01 00:00:00
metasploit
metasploit
exploitdb
exploitdb
openvas
openvas
RDS / MDAC Vulnerability (msadcs.dll) located
2005-11-03 00:00:00
Microsoft RDS / MDAC Vulnerability (MS99-025, msadcs.dll) - Active Check
2005-11-03 00:00:00
cvelist
cvelist
CVE-1999-1011
2000-06-02 04:00:00
nvd
nvd
CVE-1999-1011
1999-07-19 04:00:00
packetstorm
packetstorm
Microsoft IIS MDAC msadcs.dll RDS Arbitrary Remote Command Execution
2012-06-07 00:00:00
zdt
zdt
Microsoft IIS MDAC msadcs.dll RDS Arbitrary Remote Command Execution
2012-06-07 00:00:00
seebug
seebug
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.4
Confidence
Low
EPSS
0.683
Percentile
98.0%
Related for CVE-1999-1011