II
Product
Internet Information Server
107
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 0Low 0
Watch
Add Internet Information Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-1999-1376 | – | Jan 14 | Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands Affected: 4.0 |
| CVE-1999-0448 | – | Jan 1 | IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request Affected: 4.0 |
| CVE-1999-0007 | – | Jun 26 | Information from SSL-encrypted sessions via PKCS #1 Affected: 3.0; 4.0 |
| CVE-1999-0278 | – | Jun 1 | In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL Affected: 3.0; 4.0 |
| CVE-1999-0191 | – | Sep 1 | IIS newdsn.exe CGI script allows remote users to overwrite files Affected: 3.0 |
| CVE-1999-0281 | – | Jun 1 | Denial of service in IIS using long URLs Affected: 3.0 |
| CVE-1999-0253 | – | Jan 1 | IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a Affected: 3.0 |