Unscored CVE-1999-0407 EUVD-1999-0407GHSA-h954-xhrf-5v4c

By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, o…

Published Jun 2, 2000 · Updated Aug 1, 2024 · Assigned by mitre

Description

By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system.

References

19990209 ALERT: IIS4 allows proxied password attacks over NetBIOS mailing-list
19990209 Re: IIS4 allows proxied password attacks over NetBIOS mailing-list