CVE-1999-1535: Buffer overflow in AspUpload.dll in Persits Software AspUpload before 1.4.0.2 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a… | LiveThreat CVE Feed — Verisq

Login Request a demo

Unscored severity · published Jul 20, 1999

CVE-1999-1535

Buffer overflow in AspUpload.dll in Persits Software AspUpload before 1.4.0.2 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a…

–

CVSS

3.7%

EPSS

No

On KEV

Description

Buffer overflow in AspUpload.dll in Persits Software AspUpload before 1.4.0.2 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument in the HTTP request.

Exploitation

Is it being used?

Exploit prediction (EPSS)3.7% · higher than 90% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

AS

Aspupload · Persits

through 1.4.0.2 · source: NVD

Affected product

AS

Aspupload

Persits

All Aspupload CVEs

References

https://nvd.nist.gov/vuln/detail/CVE-1999-1535

https://www.cve.org/CVERecord?id=CVE-1999-1535

http://marc.info/?l=ntbugtraq&m=93256878011447&w=2

http://marc.info/?l=ntbugtraq&m=93501427820328&w=2

Vendor Advisory

http://www.securityfocus.com/bid/592

exchange.xforce.ibmcloud.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/3291

More from Aspupload

–

Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and read arbitrary files, and list arbitrary directories, via a