Description

By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system.

Remediation

References

CVE-1999-0407

Related Vulnerabilities

Dolphin Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2008-3167)

WordPress Plugin Slider Revolution Responsive Arbitrary File Upload (3.0.95)

WebLogic CVE-2023-21960 Vulnerability (CVE-2023-21960)

LimeSurvey Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-1000658)

WordPress Plugin SEO Redirection-301 Redirect Manager Multiple Cross-Site Scripting Vulnerabilities (2.8)

Severity

Critical

Tags

Missing Update Known Vulnerabilities CVE-1999-0407