high7.5Public exploit code
CVE-1999-0412
In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft IIS 2.0/3.0/4.0 - ISAPI GetExtensionVersion()1999-03-08 · local · windows · Verified
Impact
In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Information Server | Versions 3.0, 4.0 |
| Microsoft | Internet Information Services | Version 2.0 |