Quick answers
- Is CVE-1999-0012 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-1999-0012 being exploited in the wild.
- How severe is CVE-1999-0012?
- High severity, with a CVSS score of 7, published 6 February 1998.
- Which products and versions are affected?
- Microsoft Windows-based Web Servers.
- Is there a fix for CVE-1999-0012?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-1999-0012 attacked?
- It is attacked over the network, in a hosted service.
- Am I affected by CVE-1999-0012?
- Check whether you run Microsoft Internet Information Services. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
This vulnerability involves an authentication and access control bypass in various Windows-based web servers. The flaw is rooted in how the server handles file system requests involving long filenames, which can be used to circumvent security filters or access control lists (ACLs) that expect standard 8.3 or short-form naming conventions. A remote, unauthenticated attacker can exploit this by sending a specially crafted HTTP request for a file using its long filename alias. Successful exploitation allows the attacker to read or potentially modify files that should otherwise be restricted by the server's configuration.
Affected products
- Microsoft Windows-based Web Servers
Timeline
- 1998-02-06: disclosed