Description

A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands.

Remediation

References

CVE-1999-0349

Related Vulnerabilities

SugarCRM Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-17310)

Apache HTTP Server Out-of-bounds Read Vulnerability (CVE-2023-31122)

WordPress Plugin Custom Website Data Cross-Site Request Forgery (1.2)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-37304)

Internet Information Services Improper Authentication Vulnerability (CVE-2009-1122)

Severity

High

Classification

CVE-1999-0349 CWE-119

Tags

Missing Update Known Vulnerabilities