CVE-1999-0012

CVSS 2.0 Score 5.0 of 10 (medium)

Details

Published Feb 6, 1998
Updated: Nov 20, 2024

Summary

CVE-1999-0012 is a vulnerability in some Microsoft Windows web servers that enables remote attackers to bypass access restrictions for files with unusually long file names. This issue can potentially allow unauthorized access to sensitive data or enable further attacks. The vulnerability arises due to the web servers' failure to properly validate and restrict file access based on long file names. An attacker can exploit this weakness to gain privileged access to files that should be restricted, potentially leading to data theft or other malicious activities.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft IIS
  • Microsoft FrontPage
  • Netscape FastTrack

Affected Vendors

  • Microsoft
  • Netscape