high7.5Public exploit code
CVE-1999-0450
In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft IIS 5.0 - IISAPI Extension Enumerate Root Web Server Directory1999-01-26 · remote · windows · Verified
Impact
In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Information Server | Versions 3.0, 4.0 |
| Microsoft | Internet Information Services | Versions 2.0, 5.0 |