CVE-1999-0349 - A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands

Back Back to CVE browser

HIGH

A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands

Published Sep 29, 1999

7.5

HIGH

CVSS 2.0

EPSS 17.93%

Description

A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (4)

http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ188348
vendor-advisoryx_refsource_MSKB
http://www.eeye.com/html/Research/Advisories/IIS%20Remote%20FTP%20Exploit/DoS%20Attack.html
third-party-advisoryx_refsource_EEYE
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-003
vendor-advisoryx_refsource_MS
https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-0349
Advisory

Link	Providers	Tags
http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ188348		vendor-advisoryx_refsource_MSKB
http://www.eeye.com/html/Research/Advisories/IIS%20Remote%20FTP%20Exploit/DoS%20Attack.html		third-party-advisoryx_refsource_EEYE
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-003		vendor-advisoryx_refsource_MS
https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-0349		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 29, 1999

Updated Aug 1, 2024

Reserved Jun 7, 1999

Link CVE-1999-0349

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-1999-0349

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Sep 29, 1999

Updated Aug 1, 2024

Link EUVD-1999-0349

GitHub

No data