CVE Catalog
CVE-1999-0412
HighExploitation Probability (EPSS)
Very high risk10.24%
95th percentile - higher than 95% of all known CVEs
Summary
In IIS and other web servers, an attacker can execute commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.
Risk Assessment
This vulnerability allows an attacker to gain full system privileges, potentially leading to serious security breaches.
Recommendation
It is recommended to run the web server with limited privileges and to avoid loading unknown ISAPI extensions.
Original NVD description (English source)
In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.