CVE Catalog
CVE-1999-0278
MediumExploitation Probability (EPSS)
Very high risk64.81%
99th percentile - higher than 99% of all known CVEs
Summary
In IIS, remote attackers can obtain source code for ASP files by appending '::$DATA' to the URL.
Risk Assessment
Attackers can exploit this vulnerability to disclose sensitive information contained in ASP files, potentially leading to further attacks on the application.
Recommendation
It is recommended to update IIS to the latest version and implement appropriate security rules to block access to source files.
Original NVD description (English source)
In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL.