CVE-1999-1591

EPSS 15.94%
Published 31.12.1999 05:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not require authentication credentials under certain conditions, which allows remote attackers to bypass authentication requirements, as demonstrated by connecting via Microsoft Visual InterDev 6.0.

Affected products Warnungen 0 Metrics 2 CWE 0 References 6

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Internet Information Server Version4.0 Updatesp4

Microsoft ≫ Visual Interdev Version6.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	15.94%	0.945

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://archives.neohapsis.com/archives/ntbugtraq/1998-1999/msg00276.html

http://archives.neohapsis.com/archives/ntbugtraq/1998-1999/msg00277.html

http://www.securityfocus.com/bid/190

https://nvd.nist.gov/vuln/detail/CVE-1999-1591

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-1999-1591

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-1999-1591

EUVD