CVE-1999-0278

CVSS 2.0 Score 5.0 of 10 (medium)

Details

Published Jun 1, 1998
Updated: Nov 20, 2024

Summary

CVE-1999-0278 is a vulnerability affecting Microsoft's Internet Information Services (IIS). Hackers can exploit this issue by appending "::$DATA" to the URL of a specific Active Server Pages (ASP) file, enabling them to obtain the source code of the file remotely. This vulnerability poses a significant risk as it allows unauthorized access to sensitive information and potentially leads to more advanced attacks. IIS servers should be updated to address this issue to prevent potential exploitation.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Windows NT
  • Microsoft IIS

Affected Vendors

  • Microsoft