high7.1Public exploit code
CVE-1999-0725
When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft IIS 3.0/4.0 - Double Byte Code Page1999-06-24 · remote · windows · Verified
Impact
When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. "Double Byte Code Page".
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Information Server | Versions 3.0, 4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ233335
- http://www.securityfocus.com/bid/477
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-022
- https://exchange.xforce.ibmcloud.com/vulnerabilities/2302
- http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ233335
- http://www.securityfocus.com/bid/477
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-022
- https://exchange.xforce.ibmcloud.com/vulnerabilities/2302