CVE-1999-1011: Microsoft Data Access Components

High severity, CVSS 10.0. EPSS: 77.1% chance of exploitation in the next 30 days.

The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.

Affected products

• Microsoft Data Access Components: version 1.5 only; version 2.0 only; version 2.1 only
• Microsoft Index Server: version 2.0 only
• Microsoft Internet Information Server: version 3.0 only; version 4.0 only
• Microsoft Site Server: version 3.0 only

Published 1999-07-19. Last modified 2026-06-16.