CVE-1999-0233

Description

IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files.

Affected products

• microsoft / internet_information_services1.0 – 1.0

Exploits & proofs of concept

• exploit-dbMicrosoft IIS 1.0 / Netscape Server 1.0/1.12 / OReilly WebSite Professional 1.1b - '.cmd' / '.CMD' Remote Command Executionby anonymous

References

• MISChttp://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ148188
• MISChttp://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ155056