CVE-1999-0738
CVSS 2.0 Score 5 of 10 (medium)
Details
Summary
CVE-1999-0738 is a vulnerability affecting Microsoft's Internet Information Services (IIS) and Site Server. The issue lies in the code.asp file which can be exploited by remote attackers to read arbitrary files on the affected system. This poses a significant risk as sensitive data could be accessed and potentially misused. Attackers can take advantage of this vulnerability by sending maliciously crafted requests to the code.asp file, enabling them to gain unauthorized access to vital information. System administrators are encouraged to apply relevant patches to mitigate this exposure.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft IIS
Affected Vendors
- Microsoft