CVE Catalog
CVE-1999-1451
MediumExploitation Probability (EPSS)
Very high risk17.73%
97th percentile - higher than 97% of all known CVEs
Summary
The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files.
Risk Assessment
Attackers may gain access to sensitive data, potentially leading to serious security breaches within the organization.
Recommendation
It is recommended to update IIS and Site Server to the latest versions and restrict access to the Winmsdp.exe file.
Original NVD description (English source)
The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files.