Description IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions. References Q241407 vendor-advisory 658 vdb-entry Q242559 vendor-advisory MS99-039 vendor-advisory