Description

The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.

Remediation

References

CVE-1999-1011

Related Vulnerabilities

PHP Deserialization of Untrusted Data Vulnerability (CVE-2007-1701)

WordPress Plugin Yasr-Yet Another Stars Rating Unspecified Vulnerability (0.9.1)

Select2 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10744)

Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-15219)

WordPress Plugin VaultPress Man-in-The-Middle (MiTM) Remote Code Execution (1.8.6)

Severity

Critical

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-1999-1011