CVE-1999-1011

The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

77.14% chance of exploitation in the next 30 days, 100th percentile

Published

2000-06-02

Updated

2024-08-01

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/iis/msadc.rb

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/19425
• https://www.exploit-db.com/exploits/19424

Security advisories

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-004
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-025
• https://www.securityfocus.com/bid/529

References

• CVE Record
• NVD entry