What’s Vulnerable › Vulnerabilities

CVE-1999-1011

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 77.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2000-06-02 · updated 2026-06-16
• Weakness: CWE-264

Description

The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.

Affected products

• Microsoft Data Access Components: 1.5, 2.0, 2.1
• Microsoft Index Server: 2.0
• Microsoft Internet Information Server: 3.0, 4.0
• Microsoft Site Server: 3.0

References

• http://www.ciac.org/ciac/bulletins/j-054.shtml
• http://www.osvdb.org/272
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-004
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-025
• https://www.securityfocus.com/bid/529
• http://www.ciac.org/ciac/bulletins/j-054.shtml
• http://www.osvdb.org/272
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-004
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-025
• https://www.securityfocus.com/bid/529

Get alerted when CVE-1999-1011 or the next vulnerability affects your stack