Unrated severityNVD Advisory· Published Feb 19, 1999· Updated Jun 16, 2026
CVE-1999-0412
CVE-1999-0412
Description
In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:internet_information_services:2.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.