Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-1999-0407

CVSS 10.0 4 detections found
View on NVD →
By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system.

Detection rules

Source Rule Status Updated
suricata GPL EXPLOIT iisadmpwd attempt rev 14 2024-03-08
suricata GPL EXPLOIT /iisadmpwd/aexp2.htr access rev 14 2024-03-08
snort GPL EXPLOIT /iisadmpwd/aexp2.htr access rev 12 2012-07-27
snort GPL EXPLOIT iisadmpwd attempt rev 12 2012-07-27