high7.2Public exploit code
CVE-1999-0360
MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Site Server 2.0 with IIS 4.0 - Arbitrary File Upload1999-01-30 · remote · windows · Verified
Impact
MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Site Server | Version 2.0 |