Vulnerabilities > CVE-1999-1375 - Unspecified vulnerability in Microsoft Internet Information Server 3.0/4.0

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
microsoft
exploit available
NVD
Published: 1999-02-11
Updated: 2016-10-18

Summary

FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by specifying the name in the file parameter.

Vulnerable Configurations

Part Description Count
Application
Microsoft
2

Exploit-Db

descriptionMicrosoft IIS 3.0/4.0 Using ASP And FSO To Read Server Files Vulnerability. CVE-1999-1375 . Remote exploits for multiple platform
idEDB-ID:19194
last seen2016-02-02
modified1999-02-11
published1999-02-11
reporterGary Geisbert
sourcehttps://www.exploit-db.com/download/19194/
titleMicrosoft IIS 3.0/4.0 Using ASP And FSO To Read Server Files Vulnerability

References