CVE-1999-1544 — MEDIUM (5.0)

Vulnerability Description

Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a long NLST (ls) command.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P

Confidentiality

NONE

Integrity

NONE

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
Microsoft	Internet Information Server	3.0

References

http://marc.info/?l=bugtraq&m=91722115016183&w=2
http://marc.info/?l=bugtraq&m=91722115016183&w=2

FAQ

What is CVE-1999-1544?

CVE-1999-1544 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a long NLST (ls) command.

How severe is CVE-1999-1544?

CVE-1999-1544 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-1999-1544?

Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Internet Information Server.