CVE-1999-0861 Race condition in n/a
A race condition in the SSL ISAPI filter allows attackers to leak plaintext information from IIS and other servers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-1999-0861?
CVE-1999-0861 is a low-severity vulnerability in Microsoft Internet Information Server, published on 4 Jan 2000. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext.
Weakness: CWE-362
Which versions are affected by CVE-1999-0861?
It affects 4 products.
Products include Microsoft Commercial Internet System, Microsoft Internet Information Server, Microsoft Site Server, Microsoft Site Server Commerce.
How do I fix CVE-1999-0861?
No fix has been published for CVE-1999-0861 yet. Limit exposure of the affected software until one is available.
Is CVE-1999-0861 being exploited?
There is no known exploitation of CVE-1999-0861 in the wild and no public exploit code.
Other vulnerabilities in Microsoft Internet Information Server
Sources
Also known as GHSA-c76m-g7m9-pfh3.