Description

By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system.

Remediation

References

Related Vulnerabilities

Severity

Critical

Classification

CVE-1999-0407

Tags

Missing Update Known Vulnerabilities