CVE-1999-1591
First published: Fri Dec 31 1999(Updated: )
Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not require authentication credentials under certain conditions, which allows remote attackers to bypass authentication requirements, as demonstrated by connecting via Microsoft Visual InterDev 6.0.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Visual Interdev | =6.0 | |
| Microsoft Internet Information Services | =4.0-sp4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-1999-1591?
CVE-1999-1591 is considered a critical vulnerability due to its ability to allow remote attackers to bypass authentication requirements.
How do I fix CVE-1999-1591?
To fix CVE-1999-1591, ensure that all relevant hotfixes for Microsoft Internet Information Services 4.0 SP4 are applied.
What software versions are affected by CVE-1999-1591?
CVE-1999-1591 affects Microsoft Internet Information Services 4.0 SP4 and Microsoft Visual Interdev 6.0 without certain hotfixes.
Can CVE-1999-1591 be exploited remotely?
Yes, CVE-1999-1591 can be exploited remotely, allowing unauthorized access to the IIS server.
What are the risks associated with CVE-1999-1591?
The risks associated with CVE-1999-1591 include unauthorized access to sensitive data and potential system compromise.
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/severity
- agent/description
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- vendor/microsoft
- canonical/microsoft visual interdev
- canonical/microsoft internet information server
- agent/software-canonical-lookup-request
- collector/nvd-index
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- version/microsoft visual interdev/6.0
- canonical/microsoft internet information services
- version/microsoft internet information services/4.0-sp4