← Database

CVE-1999-0407

CRITICAL CVSS: 10.0 Published: 1999-02-09 Modified: 2026-06-16

Description

By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system.

Affected Platforms

Microsoft Internet Information Server

Weakness Type

NVD-CWE-Other

References