## Description

The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### microsoft - data_access_components

Affected Versions:

- 1.5

### microsoft - data_access_components

Affected Versions:

- 2.0

### microsoft - data_access_components

Affected Versions:

- 2.1

### microsoft - index_server

Affected Versions:

- 2.0

### microsoft - internet_information_server

Affected Versions:

- 3.0

### microsoft - internet_information_server

Affected Versions:

- 4.0

### microsoft - site_server

Affected Versions:

- 3.0

## References

- http://www.ciac.org/ciac/bulletins/j-054.shtml
- http://www.osvdb.org/272
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-004
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-025
- https://www.securityfocus.com/bid/529
- http://www.ciac.org/ciac/bulletins/j-054.shtml
- http://www.osvdb.org/272
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-004
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-025
- https://www.securityfocus.com/bid/529

Neural Processor Active