Commercial Internet System (Microsoft) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2000-03-30. Vendor: Microsoft.

CVEs of Commercial Internet System

• CVE-2000-0246 - CVSS 5 (medium), 2000-03-30: IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read…
• CVE-2000-0053 - CVSS 7.5 (high), 2000-01-04: Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request.
• CVE-1999-0777 - CVSS 7.5 (high), 1999-09-23: IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.
• CVE-1999-0910 - CVSS 5 (medium), 1999-09-10: Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently…
• CVE-1999-0867 - CVSS 5 (medium), 1999-08-11: Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.
• CVE-1999-0861 - CVSS 2.6 (low), 1999-08-11: Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext.