CVE-1999-0725

Published: Aug 19, 1999Modified: Apr 16, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:C/I:N/A:N

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. "Double Byte Code Page".

Affected (6)

Products: Microsoft: Internet Information Server

1 product

Internet Information Server

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Microsoft Internet Information Server	Version 3.0
Microsoft Internet Information Server	Version 3.0
Microsoft Internet Information Server	Version 3.0
Microsoft Internet Information Server	Version 4.0
Microsoft Internet Information Server	Version 4.0
Microsoft Internet Information Server	Version 4.0

Related CWEs

References (8)

http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ233335

Source: cve@mitre.org

http://www.securityfocus.com/bid/477

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-022

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/2302

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ233335

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/477

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-022

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/2302

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.