CVE-1999-0154

IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

1999-12-31

Last modified

2024-08-01

Affected products

• Internet Information Server (Microsoft)
• Internet Information Services (Microsoft)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0154