CVE-1999-0412

No fix known EPSS 10%

In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.

Published 1999-09-29 · CVE record · OSV

Products: microsoft internet_information_server, microsoft internet_information_services