{"id":"CVE-1999-0233","title":"IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files.","summary":"IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files.","severity":"critical","cvss":10,"cvssVector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","published":"1996-02-25","updated":"2026-06-16","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-1999-0233","references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ148188","label":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ155056","label":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ148188","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ155056","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","exploit-available"],"epss":0.16272,"epssPercentile":0.96803,"ingestedAt":"2026-06-22T15:59:08.063Z","exploitAvailable":true,"exploits":{"exploitdb":true,"checkedAt":"2026-09-23T07:13:14.650Z"},"slug":"CVE-1999-0233","body":"## Overview\n\nIIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":70,"depthScoreParts":{"impact":55,"likelihood":3.3,"exploitation":12,"ransomware":0},"changes":[]}