CVE-1999-1544: Microsoft Internet Information Server

Medium severity, CVSS 5.0. EPSS: 13.6% chance of exploitation in the next 30 days.

Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a long NLST (ls) command.

Affected products

• Microsoft Internet Information Server: version 3.0 only; version 4.0 only

Published 1999-01-24. Last modified 2026-06-16.