CVE-1999-1011
Severity CVSS v4.0:
Pending analysis
Type:
CWE-264
Permissions, Privileges, and Access Control
Publication date:
19/07/1999
Last modified:
03/04/2025
Description
The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.
Impact
Base Score 2.0
10.00
Severity 2.0
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:microsoft:data_access_components:1.5:*:*:*:*:*:*:* | ||
| cpe:2.3:a:microsoft:data_access_components:2.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:microsoft:data_access_components:2.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:microsoft:index_server:2.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:microsoft:site_server:3.0:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://www.ciac.org/ciac/bulletins/j-054.shtml
- http://www.osvdb.org/272
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-004
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-025
- https://www.securityfocus.com/bid/529
- http://www.ciac.org/ciac/bulletins/j-054.shtml
- http://www.osvdb.org/272
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-004
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-025
- https://www.securityfocus.com/bid/529