CVE-1999-1544: Buffer Overflow
Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a long NLST (ls) command.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Microsoft Internet Information Services FTP serverfrom your environment.Uninstall or remove the FTP server component from systems where FTP functionality is not required.
- Configuration
Stop and disable the IIS FTP service (ftpsvc) on affected systems until a vendor security update is available.
Microsoft Internet Information Services (IIS) FTP server FTP service (ftpsvc) enabled = false - Compensating control
Block or restrict access to FTP (TCP port 21) at perimeter and internal firewalls; allow access only from trusted administrative IPs to reduce risk of remote exploitation of the NLST buffer overflow.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1544?
CVE-1999-1544 is considered a critical vulnerability due to its potential to cause denial of service.
How do I fix CVE-1999-1544?
To fix CVE-1999-1544, it is recommended to upgrade Microsoft Internet Information Server to a version that is no longer vulnerable.
What systems are affected by CVE-1999-1544?
CVE-1999-1544 affects Microsoft Internet Information Server versions 3.0 and 4.0.
Can CVE-1999-1544 be exploited remotely?
Yes, CVE-1999-1544 can be exploited by remote attackers in some cases.
What type of attack is associated with CVE-1999-1544?
CVE-1999-1544 is associated with a buffer overflow attack triggered by long NLST commands.