CVE-1999-0278
CVSS 2.0 Score 5.0 of 10 (medium)
Details
Published Jun 1, 1998
Updated: Nov 20, 2024
Summary
CVE-1999-0278 is a vulnerability affecting Microsoft's Internet Information Services (IIS). Hackers can exploit this issue by appending "::$DATA" to the URL of a specific Active Server Pages (ASP) file, enabling them to obtain the source code of the file remotely. This vulnerability poses a significant risk as it allows unauthorized access to sensitive information and potentially leads to more advanced attacks. IIS servers should be updated to address this issue to prevent potential exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Microsoft Windows NT
- Microsoft IIS
Affected Vendors
- Microsoft