Lucene search
HistoryJul 19, 1999 - 4:00 a.m.
CVE-1999-1011
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.4
Confidence
Low
EPSS
0.683
Percentile
98.0%
The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.
Affected configurations
Node
microsoftdata_access_componentsMatch1.5
ORmicrosoftdata_access_componentsMatch2.0
ORmicrosoftdata_access_componentsMatch2.1
ORmicrosoftindex_serverMatch2.0
ORmicrosoftinternet_information_serverMatch3.0
ORmicrosoftinternet_information_serverMatch4.0
ORmicrosoftsite_serverMatch3.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | data_access_components | 1.5 | cpe:2.3:a:microsoft:data_access_components:1.5:*:*:*:*:*:*:* |
| microsoft | data_access_components | 2.0 | cpe:2.3:a:microsoft:data_access_components:2.0:*:*:*:*:*:*:* |
| microsoft | data_access_components | 2.1 | cpe:2.3:a:microsoft:data_access_components:2.1:*:*:*:*:*:*:* |
| microsoft | index_server | 2.0 | cpe:2.3:a:microsoft:index_server:2.0:*:*:*:*:*:*:* |
| microsoft | internet_information_server | 3.0 | cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:* |
| microsoft | internet_information_server | 4.0 | cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:* |
| microsoft | site_server | 3.0 | cpe:2.3:a:microsoft:site_server:3.0:*:*:*:*:*:*:* |
Related
cve
cve
CVE-1999-1011
2000-06-02 04:00:00
nessus
nessus
Microsoft IIS MDAC RDS (msadcs.dll) Arbitrary Remote Command Execution
2000-04-01 00:00:00
metasploit
metasploit
exploitdb
exploitdb
openvas
openvas
RDS / MDAC Vulnerability (msadcs.dll) located
2005-11-03 00:00:00
Microsoft RDS / MDAC Vulnerability (MS99-025, msadcs.dll) - Active Check
2005-11-03 00:00:00
cvelist
cvelist
CVE-1999-1011
2000-06-02 04:00:00
packetstorm
packetstorm
Microsoft IIS MDAC msadcs.dll RDS Arbitrary Remote Command Execution
2012-06-07 00:00:00
zdt
zdt
Microsoft IIS MDAC msadcs.dll RDS Arbitrary Remote Command Execution
2012-06-07 00:00:00
seebug
seebug
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.4
Confidence
Low
EPSS
0.683
Percentile
98.0%
Related for NVD:CVE-1999-1011