CVE-1999-1538

When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allows an…

published September 12, 2001

CVSS
—
EPSS
25%
Percentile
97.9
In the wild
Unconfirmed
What it is

When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allows an unauthorized user to gain access to sensitive server information, including the Administrator's password.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.25267 · 97.9th percentile
Published
2001-09-12T04:00Z
EPSS history
Timeline
  • 12 SEP 04:00Z
    When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allows an…
    cvelistv5