CVE-1999-0349: Buffer Overflow
A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Microsoft Internet Information Services (FTP service)from your environment.Uninstall the IIS FTP service/component if FTP functionality is not required, removing the vulnerable LIST command handler.
- Configuration
Stop and disable the IIS FTP service to prevent processing of the vulnerable FTP LIST (ls) command until a vendor fix is available.
Microsoft Internet Information Services (FTP service) ftp_service_enabled = false - Compensating control
Restrict access to FTP (TCP port 21) at network and host firewalls to trusted IP addresses only, or block FTP access from untrusted networks to mitigate exposure to the vulnerable LIST command.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0349?
CVE-1999-0349 is rated as a critical severity vulnerability due to its potential for remote denial of service and arbitrary command execution.
How do I fix CVE-1999-0349?
To fix CVE-1999-0349, update your Microsoft Internet Information Server to the latest version that is not affected by this vulnerability.
Which versions of IIS are affected by CVE-1999-0349?
CVE-1999-0349 affects Microsoft Internet Information Server versions 3.0 and 4.0.
What type of vulnerability is CVE-1999-0349?
CVE-1999-0349 is classified as a buffer overflow vulnerability in the FTP list command.
Can CVE-1999-0349 be exploited remotely?
Yes, CVE-1999-0349 can be exploited remotely by attackers to disrupt services or execute commands.