CVE-1999-1544

Medium

Published: 24/01/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

13.63%

96th percentile - higher than 96% of all known CVEs

Summary

Buffer overflow in the FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a long NLST (ls) command.

Risk Assessment

Attackers can exploit this vulnerability to disrupt the FTP server's operation, leading to service unavailability for users.

Recommendation

It is recommended to upgrade to a newer version of Microsoft IIS that is not vulnerable to this flaw and to monitor server logs for suspicious activities.

Original NVD description (English source)

Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a long NLST (ls) command.