Lucene search

MitreCVE-1999-1520

HistorySep 01, 2004 - 4:00 a.m.

CVE-1999-1520

2004-09-0104:00:00

mitre

web.nvd.nist.gov

microsoft site server

ad server sample

sql database

configuration issue

cve-1999-1520

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

7.2

Confidence

Low

EPSS

0.007

Percentile

80.7%

JSON

A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC file, which exposes sensitive SQL database information.

Affected configurations

Nvd

Node

microsoftsite_serverMatch3.0

VendorProductVersionCPE
microsoftsite_server3.0cpe:2.3:a:microsoft:site_server:3.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	site_server	3.0	cpe:2.3:a:microsoft:site_server:3.0:::::::*

References

marc.info/?l=bugtraq&m=92647407227303&w=2

www.securityfocus.com/bid/256

exchange.xforce.ibmcloud.com/vulnerabilities/2270

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

7.2

Confidence

Low

EPSS

0.007

Percentile

80.7%

JSON

Related for CVE-1999-1520