Skip to content
Saturday, December 6, 2025
High Published: Dec 31, 1999 Modified: Apr 03, 2025

CVE-1999-1591

7.5 CVSS SCORE
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Share:

Description

Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not require authentication credentials under certain conditions, which allows remote attackers to bypass authentication requirements, as demonstrated by connecting via Microsoft Visual InterDev 6.0.

CVSS Vector Details

Attack Vector Network
Attack Complexity Low
Confidentiality P
Integrity P
Availability P

Affected Software Configurations

  • a microsoft internet_information_server 4.0 sp4 * * * * * *
  • a microsoft visual_interdev 6.0 * * * * * * *

Weaknesses (CWE)

  • NVD-CWE-Other

References & External Links

External Resources

NVD Official Record Exploit-DB Search Exploits CVE Details Statistics GitHub PoC / Tools X / Twitter Discussions Google Search More
← Back to CVE Tracker