CVE-1999-1011

CVE Database · CVE-1999-1011

CVE-1999-1011

· N/AModified

CVSS v3.1

N/A

EPSS

77.14%

Published

Jul 19, 1999

Modified

Apr 15, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBMicrosoft Data Access Components (MDAC) 2.1 / Microsoft IIS 3.0/4.0 / Microsoft Index Server 2.0 / Microsoft Site Server Commerce Edition 3.0 i386 MDAC - RDS (2 Exploit-DBMicrosoft Data Access Components (MDAC) 2.1 / Microsoft IIS 3.0/4.0 / Microsoft Index Server 2.0 / Microsoft Site Server Commerce Edition 3.0 i386 MDAC - RDS (1

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.

Weaknesses (CWE)

CWE-264

Affected Products (7)

microsoft · data_access_componentsvulnerable

microsoft · index_servervulnerable

microsoft · internet_information_servervulnerable

microsoft · site_servervulnerable

References (10)

http://www.ciac.org/ciac/bulletins/j-054.shtml

http://www.osvdb.org/272

https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-004

https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-025

https://www.securityfocus.com/bid/529

http://www.ciac.org/ciac/bulletins/j-054.shtml

http://www.osvdb.org/272

https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-004

https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-025

https://www.securityfocus.com/bid/529

KEV Catalog EPSS Scores Vendors All CVEs