CVE Catalog
CVE-1999-1011
HighExploitation Probability (EPSS)
Very high risk77.14%
99th percentile - higher than 99% of all known CVEs
Summary
The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, allowing remote attackers to execute arbitrary commands.
Risk Assessment
Attackers can exploit this vulnerability to execute remote code, potentially leading to system takeover or data leakage.
Recommendation
It is recommended to update to the latest version of MDAC and restrict access to the RDS component to trusted users.
Original NVD description (English source)
The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.