Vulnerability Details CVE-1999-1538
When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allows an unauthorized user to gain access to sensitive server information, including the Administrator's password.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.566
EPSS Ranking 98.0%
CVSS Severity
CVSS v2 Score 2.1
References
Products affected by CVE-1999-1538
-
cpe:2.3:a:microsoft:internet_information_server:4.0