Vulnerability in Microsoft Internet Information Server

CVE-1999-0154

IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL.

EPSS: 0.400 (98.5th percentile) — read the EPSS interpretation.

Affected products

Microsoft Internet_information_server — versions 3.0
Microsoft Internet_information_services — versions 2.0
N/a — versions n/a

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

cve@mitre.org (x_refsource_MISC)

Frequently asked questions

What is CVE-1999-0154?: CVE-1999-0154 is a vulnerability in Microsoft Internet Information Server. Published 1999-12-31.
Is CVE-1999-0154 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.