CVSS: 10.0EPSS: 90%CPEs: 4EXPL: 5CVE-1999-0874 – Microsoft IIS 4.0 - Remote Buffer Overflow
https://notcve.org/view.php?id=CVE-1999-0874
Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions. • https://www.exploit-db.com/exploits/19247 https://www.exploit-db.com/exploits/19245 https://www.exploit-db.com/exploits/19248 https://www.exploit-db.com/exploits/16468 https://www.exploit-db.com/exploits/19246 http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ234905 http://www.ciac.org/ciac/bulletins/j-048.shtml http://www.eeye.com/html/Research/Advisories/AD06081999.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-019 https • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.0EPSS: 94%CPEs: 1EXPL: 0CVE-1999-0737
https://notcve.org/view.php?id=CVE-1999-0737
The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. • https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013 •
CVSS: 5.0EPSS: 94%CPEs: 1EXPL: 0CVE-1999-0738
https://notcve.org/view.php?id=CVE-1999-0738
The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. • https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013 •
CVSS: 5.0EPSS: 94%CPEs: 1EXPL: 0CVE-1999-0739
https://notcve.org/view.php?id=CVE-1999-0739
The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. • https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013 •
CVSS: 5.0EPSS: 90%CPEs: 1EXPL: 1CVE-1999-0736 – Microsoft IIS 4.0 / Microsoft Site Server 3.0 - Showcode ASP
https://notcve.org/view.php?id=CVE-1999-0736
The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. • https://www.exploit-db.com/exploits/19129 https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A932 •