CVE-1999-1011
The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.
- Score
- CVSS 2.0 10.0 Critical
- Status
- Modified - cve@mitre.org
- Published
- 1999-07-19
- Last modified
- 2024-08-01
- Weaknesses
- CWE-264
Affected products
- Data Access Components (Microsoft)
- Index Server (Microsoft)
- Internet Information Server (Microsoft)
- Site Server (Microsoft)
References
- http://www.ciac.org/ciac/bulletins/j-054.shtml
- http://www.osvdb.org/272
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-004
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-025
- https://www.securityfocus.com/bid/529
