| Vulnerability Name: | CVE-1999-1520 (CCN-2270) | ||||||||
| Assigned: | 1999-05-11 | ||||||||
| Published: | 1999-05-11 | ||||||||
| Updated: | 2017-10-10 | ||||||||
| Summary: | A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC file, which exposes sensitive SQL database information. | ||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
| ||||||||
| CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Obtain Information | ||||||||
| References: | Source: CCN Type: BugTraq Mailing List, Tue, 11 May 1999 16:27:38 -0600 [ALERT] Site Server 3.0 May Expose SQL IDs and PSWs Source: MITRE Type: CNA CVE-1999-1520 Source: BUGTRAQ Type: UNKNOWN 19990511 [ALERT] Site Server 3.0 May Expose SQL IDs and PSWs Source: CCN Type: OSVDB ID: 13483 Microsoft Site Server AdSamples SITE.CSC Information Disclosure Source: BID Type: Exploit, Patch, Vendor Advisory 256 Source: CCN Type: BID-256 NT Site Server AdSamples Vulnerability Source: XF Type: UNKNOWN siteserver-site-csc(2270) Source: XF Type: UNKNOWN siteserver-site-csc(2270) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||