medium5.0Public exploit code
CVE-1999-0736
The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft IIS 4.0 / Microsoft Site Server 3.0 - Showcode ASP1999-05-07 · remote · multiple · Verified
Impact
The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Information Server | Version 4.0 |
References
- NVD record
- CVE.org record
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A932
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A932