CVE Catalog
CVE-1999-1520
MediumExploitation Probability (EPSS)
Very high risk10.64%
95th percentile - higher than 95% of all known CVEs
Summary
A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC file, which exposes sensitive SQL database information.
Risk Assessment
The exposure of sensitive database information can lead to serious security breaches and data loss within the organization.
Recommendation
It is recommended to review and improve the configuration of the Ad Server Sample directory to secure the SITE.CSC file from unauthorized access.
Original NVD description (English source)
A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC file, which exposes sensitive SQL database information.