CVE-1999-1520

Description

A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC file, which exposes sensitive SQL database information.

Affected products

• microsoft / site_server3.0 – 3.0

Exploits & proofs of concept

• exploit-dbMicrosoft Site Server Commerce Edition 3.0 alpha - AdSamples Sensitive Informationby Andrey Kruchkov

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/2270
• MISChttp://www.securityfocus.com/bid/256
• MAILING_LISThttp://marc.info/?l=bugtraq&m=92647407227303&w=2