CVE Catalog
CVE-1999-0450
HighExploitation Probability (EPSS)
Very high risk17.43%
97th percentile - higher than 97% of all known CVEs
Summary
In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).
Risk Assessment
The ability to expose real system paths may lead to further attacks on the server, increasing the risk of system compromise.
Recommendation
It is recommended to configure IIS to not disclose path information and to monitor logs for suspicious requests.
Original NVD description (English source)
In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).