CVE-1999-0737
CVSS 2.0 Score 5 of 10 (medium)
Details
Published May 7, 1999
Updated: Nov 20, 2024
Summary
CVE-1999-0737 is a vulnerability affecting the viewcode.asp file in Internet Information Services (IIS) and Site Server. An attacker can exploit this issue to read arbitrary files remotely. This weakness, if left unaddressed, poses a significant risk to confidentiality and potentially integrity and availability of the targeted system's data. The vulnerability arises due to insufficient access controls in the viewcode.asp file handler. Organizations using IIS or Site Server are advised to apply the available patches or workarounds to eliminate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Microsoft IIS
Affected Vendors
- Microsoft