Vulnerabilities > CVE-1999-0154 - Unspecified vulnerability in Microsoft products

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
microsoft
exploit available
NVD
Published: 1999-12-31
Updated: 2022-08-17

Summary

IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL.

Vulnerable Configurations

Part Description Count
Application
Microsoft
2

Exploit-Db

descriptionMicrosoft IIS 2.0/3.0 Appended Dot Script Source Disclosure Vulnerability. CVE-1999-0154. Remote exploit for windows platform
idEDB-ID:20481
last seen2016-02-02
modified1997-02-20
published1997-02-20
reporterMark Joseph Edwards
sourcehttps://www.exploit-db.com/download/20481/
titleMicrosoft IIS 2.0/3.0 Appended Dot Script Source Disclosure Vulnerability

References