CVE-1999-0360

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Jan 30, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-036110.0NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logging.CVE-1999-03625.0WS_FTP server remote denial of service through cwd command.CVE-1999-03637.2SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise.CVE-1999-036410.0Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.CVE-1999-03657.5The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.CVE-1999-03667.5In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NTCVE-1999-03672.1NetBSD netstat command allows local users to access kernel memory.CVE-1999-036810.0Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.CVE-1999-03704.6In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files.CVE-1999-03711.2Lynx allows a local user to overwrite sensitive files through /tmp symlinks.CVE-1999-03722.1The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted.CVE-1999-03737.2Buffer overflow in the "Super" utility in Debian GNU/Linux, and other operating systems, allows local users to execute commands as root.