CVE-1999-0386

Description

Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL.

Affected products

• microsoft / frontpage
• microsoft / personal_web_server4.0 – 4.0

Exploits & proofs of concept

• exploit-dbMicrosoft FrontPage Personal Web Server 1.0/4.0 - Directory Traversalby kiborg

References

• MISChttp://www.osvdb.org/111
• MISChttps://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-010