CVE Catalog
CVE-1999-0349
HighExploitation Probability (EPSS)
Very high risk17.93%
97th percentile - higher than 97% of all known CVEs
Summary
A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands.
Risk Assessment
Attackers can remotely disrupt the FTP server's operation or gain unauthorized access to the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update IIS software to the latest version and implement appropriate security measures to minimize the risk of buffer overflow.
Original NVD description (English source)
A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands.