Unscored severity · published Jul 19, 1999
CVE-1999-1011
The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute…
–
CVSS
77.1%
EPSS
No
On KEV
Description
The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.
Exploitation
Is it being used?
Exploit prediction (EPSS)77.1% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DA
Data Access Components · Microsoft
1.5; 2.0; 2.1 · source: NVD
IS
Index Server · Microsoft
2.0 · source: NVD
II
Internet Information Server · Microsoft
3.0; 4.0 · source: NVD
SS
Site Server · Microsoft
3.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-1999-1011
CVE.org
https://www.cve.org/CVERecord?id=CVE-1999-1011
www.ciac.org
http://www.ciac.org/ciac/bulletins/j-054.shtml
www.osvdb.org
http://www.osvdb.org/272
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-004
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-025
www.securityfocus.com
https://www.securityfocus.com/bid/529
More from Data Access Components
9.8
CVE-2012-1891
Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows remote attackers to execute arbitrary…
–
CVE-2011-0027
Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures,…
–
CVE-2011-0026
Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components…
–
CVE-2006-5559
The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connection.2.8) in the Microsoft Data Access Components (MDAC) 2.5…
–
CVE-2006-0003
Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and…