CVE-1999-0777
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they...
CVE-1999-0777 is a high vulnerability (CVSS 7.5) in Microsoft Commercial Internet System, published September 23, 1999. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 12.0%, the 96th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 12.0%EPSS, 96th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.
Exploit likelihood
What each source reports
NVD Score used
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.
- Record
CVE-1999-0777- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.
- Record
CVE-1999-0777- Updated
- 2026-11-02
EUVDEUVD-1999-0758No score
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.
- Record
EUVD-1999-0758- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qjvq-8mcw-xc4hNo score
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they...
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.
- Record
GHSA-qjvq-8mcw-xc4h- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ241407
securityfocus.com/bid/658
docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-039
nvd.nist.gov/vuln/detail/CVE-1999-0777
github.com/advisories/GHSA-qjvq-8mcw-xc4h