CVE-1999-1011 – MS99-025 Microsoft IIS MDAC msadcs.dll RDS Arbitrary Remote Command Execution

https://notcve.org/view.php?id=CVE-1999-1011

The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands. • https://www.exploit-db.com/exploits/19425 https://www.exploit-db.com/exploits/19424 http://www.ciac.org/ciac/bulletins/j-054.shtml http://www.osvdb.org/272 https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-004 https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-025 https://www.securityfocus.com/bid/529 https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/iis/msadc.rb • CWE-264: Permissions, Privileges, and Access Controls •