Vulnerabilities > CVE-1999-0360 - Unspecified vulnerability in Microsoft Site Server 2.0

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
microsoft
nessus
exploit available

Summary

MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely.

Vulnerable Configurations

Part Description Count
Application
Microsoft
1

Exploit-Db

descriptionMicrosoft Site Server 2.0 with IIS 4.0 Malicious File Upload Vulnerability. CVE-1999-0360. Remote exploit for windows platform
idEDB-ID:20305
last seen2016-02-02
modified1999-01-30
published1999-01-30
reporterMnemonix
sourcehttps://www.exploit-db.com/download/20305/
titleMicrosoft Site Server 2.0 with IIS 4.0 - File Upload Vulnerability

Nessus

NASL familyWeb Servers
NASL idIIS_REPOST_ASP.NASL
descriptionThe script
last seen2020-06-01
modified2020-06-02
plugin id10372
published2000-04-15
reporterThis script is Copyright (C) 2000-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/10372
titleMicrosoft IIS repost.asp File Upload