Arbitrary Command Execution Vulnerability in Microsoft Data Access Components (MDAC)

Arbitrary Command Execution Vulnerability in Microsoft Data Access Components (MDAC)

CVE-1999-1011 · HIGH Severity

AV:N/AC:L/AU:N/C:C/I:C/A:C

The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.

Learn more about our Cis Benchmark Audit For Microsoft Iis.