CVE-1999-0736

Description

The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.

Affected products

• microsoft / internet_information_server4.0 – 4.0

Exploits & proofs of concept

• exploit-dbMicrosoft IIS 4.0 / Microsoft Site Server 3.0 - Showcode ASPby L0pht

References

• MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A932
• MISChttps://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013