CVE-1999-0412

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Feb 19, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-04137.2A buffer overflow in the SGI X server allows local users to gain root access through the X server font path.CVE-1999-04145.0In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishingCVE-1999-04157.5The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to change the router's confCVE-1999-04165.0Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the router's TELNET portCVE-1999-04172.164 bit Solaris 7 procfs allows local users to perform a denial of service.CVE-1999-04186.4Denial of service in SMTP applications such as Sendmail, when a remote attacker (e.g. spammer) uses many "RCPT TO" commands in the same connCVE-1999-04195.0When the Microsoft SMTP service attempts to send a message to a server and receives a 4xx error code, it quickly and repeatedly attempts to CVE-1999-04207.2umapfs allows local users to gain root privileges by changing their uid through a malicious mount_umap program.CVE-1999-04217.2During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to the root account witCVE-1999-04224.6In some cases, NetBSD 1.3.3 mount allows local users to execute programs in some file systems that have the "noexec" flag set.CVE-1999-04242.1talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes.CVE-1999-04256.4talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes.
CVE-1999-0412: High severity, CVSS 7.5 | Vulnix