Commercial internet system

This hub aggregates every CVE we track for Commercial internet system, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 6 most recently published vulnerabilities affecting Commercial internet system.

• CVE-2000-0246IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, a...5.0Jun 2, 2000
• CVE-2000-0053Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request.7.5Apr 18, 2000
• CVE-1999-0910Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used by a different user.5.0Feb 4, 2000
• CVE-1999-0777IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.7.5Jan 4, 2000
• CVE-1999-0867Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.5.0Jan 4, 2000
• CVE-1999-0861Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext.2.6Jan 4, 2000