CVE-1999-1591
HighExploitation Probability (EPSS)
Very high risk95th percentile - higher than 95% of all known CVEs
Summary
Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes, does not require authentication credentials under certain conditions, allowing remote attackers to bypass authentication requirements.
Risk Assessment
The lack of authentication requirements may lead to unauthorized access to server resources, posing a serious threat to the organization's data security.
Recommendation
It is recommended to install all available hotfixes for IIS 4.0 SP4 to secure the server against potential attacks.
Original NVD description (English source)
Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not require authentication credentials under certain conditions, which allows remote attackers to bypass authentication requirements, as demonstrated by connecting via Microsoft Visual InterDev 6.0.