Vulnerability in Microsoft Internet Information Services (IIS) Server 4.0 SP4
CVE-1999-1591

Currently unrated

Key Information:

Vendor

Microsoft

Vendor
CVE Published:
31 December 1999

What is CVE-1999-1591?

The Microsoft Internet Information Services (IIS) Server version 4.0 SP4, when lacking specific hotfixes, permits unauthorized access by not enforcing authentication requirements under certain conditions. This flaw can be exploited by remote attackers to gain access without the need for credentials, particularly through tools like Microsoft Visual InterDev 6.0, highlighting significant security implications for users and administrators.

References

EPSS Score

13% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.