| CVE-1999-1537 | MÉDIO5.0 | IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attackers to cause a denial of service (resource exhaustion) via SSL requests to the HTTPS port for normally unencrypted files, which will cause IIS to perform extra work to send the files over SSL. | 07/07/1999 |
| CVE-1999-1478 | MÉDIO5.0 | The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that includes the [ character. | 06/07/1999 |
| CVE-1999-0874 | CRÍTICO10.0 | Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions. | 16/06/1999 |
| CVE-1999-0739 | MÉDIO5.0 | The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. | 07/05/1999 |
| CVE-1999-0738 | MÉDIO5.0 | The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. | 07/05/1999 |
| CVE-1999-0737 | MÉDIO5.0 | The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. | 07/05/1999 |
| CVE-1999-0736 | MÉDIO5.0 | The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. | 07/05/1999 |
| CVE-1999-0412 | ALTO7.5 | In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension. | 19/02/1999 |
| CVE-1999-1375 | MÉDIO5.0 | FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by specifying the name in the file parameter. | 11/02/1999 |
| CVE-1999-0407 | CRÍTICO10.0 | By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system. | 09/02/1999 |
| CVE-1999-0349 | ALTO7.5 | A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands. | 27/01/1999 |
| CVE-1999-0348 | MÉDIO5.0 | IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory. | 27/01/1999 |
| CVE-1999-0450 | ALTO7.5 | In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe). | 26/01/1999 |
| CVE-1999-0449 | ALTO7.8 | The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query.asp, or (3) search.asp scripts. | 26/01/1999 |
| CVE-1999-1544 | MÉDIO5.0 | Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a long NLST (ls) command. | 24/01/1999 |
| CVE-1999-1538 | BAIXO2.1 | When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allows an unauthorized user to gain access to sensitive server information, including the Administrator's password. | 14/01/1999 |
| CVE-1999-1376 | CRÍTICO10.0 | Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands. | 14/01/1999 |
| CVE-1999-0448 | MÉDIO5.0 | IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request. | 01/01/1999 |
| CVE-1999-0007 | MÉDIO5.0 | Information from SSL-encrypted sessions via PKCS #1. | 26/06/1998 |
| CVE-1999-0278 | MÉDIO5.0 | In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL. | 01/06/1998 |