CVE coverage
View on NVD →
CVE-1999-1538
CVSS 2.1
2 detections found
When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allows an unauthorized user to gain access to sensitive server information, including the Administrator's password.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| suricata | GPL WEB_SERVER iisadmin access | rev 15 | 2024-03-08 |
| snort | GPL WEB_SERVER iisadmin access | rev 12 | 2012-09-12 |