Microsoft Commercial Internet System vulnerabilities
6 vulnerabilities
Known vulnerabilities in Microsoft Commercial Internet System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2000-0246microsoftcommercial_internet_system+5
EPSS score79.98%
IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.CVE-2000-0053microsoftcommercial_internet_systemEPSS score14.70%
Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request.CVE-1999-0867microsoftcommercial_internet_system+2EPSS score21.52%
Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.CVE-1999-0777microsoftcommercial_internet_system+1EPSS score11.99%
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.CVE-1999-0910microsoftcommercial_internet_system+2EPSS score5.78%
Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used by a different user.CVE-1999-0861microsoftcommercial_internet_system+3EPSS score3.21%
Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext.