CVE-1999-0777
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they...
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.
Exploit likelihood
What each source reports
NVD Score used
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.
- Record
CVE-1999-0777- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.
- Record
CVE-1999-0777- Updated
- 2026-11-02
EUVDEUVD-1999-0758 No score
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.
- Record
EUVD-1999-0758- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qjvq-8mcw-xc4h No score
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they...
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.
- Record
GHSA-qjvq-8mcw-xc4h- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-1999-0777 is a high vulnerability (CVSS 7.5) in Microsoft Commercial Internet System, published September 23, 1999. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 12.0%, the 96th percentile. No source names a fixed version.
References
support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ241407
securityfocus.com/bid/658
docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-039
nvd.nist.gov/vuln/detail/CVE-1999-0777
github.com/advisories/GHSA-qjvq-8mcw-xc4h