CVE-1999-1538

Summary

CVE-1999-1538 is a vulnerability affecting Internet Information Services (IIS) versions 2 and 3. When upgrading to IIS 4, ism.dll is inadvertently left in the /scripts/iisadmin directory. This file does not restrict access to the local machine, allowing unauthorized users to obtain sensitive server information, including the Administrator's password. This vulnerability poses a significant risk to system security and should be addressed promptly by removing the ism.dll file or securing the /scripts/iisadmin directory.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.