CVE-1999-1011

Published: Jul 19, 1999Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.

Affected (7)

Products: Microsoft: Data Access Components, Index Server, Internet Information Server, Site Server

Microsoft

4 products

Data Access Components

Index Server

Internet Information Server

Site Server

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Microsoft Data Access Components	Version 1.5
Microsoft Data Access Components	Version 2.0
Microsoft Data Access Components	Version 2.1
Microsoft Index Server	Version 2.0
Microsoft Internet Information Server	Version 3.0
Microsoft Internet Information Server	Version 4.0
Microsoft Site Server	Version 3.0