CVE-1999-0154

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Dec 31, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-01945.0Denial of service in in.comsat allows attackers to generate messages.CVE-1999-019710.0finger 0@host on some systems may print information on some user accounts.CVE-1999-019810.0finger .@host on some systems may print information on some user accounts.CVE-1999-01999.8manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return value upon deletion ofCVE-1999-020010.0Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any usernCVE-1999-02055.0Denial of service in Sendmail 8.6.11 and 8.6.12.CVE-1999-022010.0Attackers can do a denial of service of IRC by crashing the server.CVE-1999-02215.0Denial of service of Ascend routers through port 150 (remote administration).CVE-1999-02225.0Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL.CVE-1999-02232.1Solaris syslogd crashes when receiving a message from a host that doesn't have an inverse DNS entry.CVE-1999-02245.0Denial of service in Windows NT messenger service through a long username.CVE-1999-022610.0Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.