medium6.4Public exploit code
CVE-1999-0191
IIS newdsn.exe CGI script allows remote users to overwrite files.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft IIS 3.0 - 'newdsn.exe' File Creation1997-08-25 · remote · windows · Verified
Impact
IIS newdsn.exe CGI script allows remote users to overwrite files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Information Server | Version 3.0 |