The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.
| Software | From | Fixed in |
|---|---|---|
| microsoft / site_server | 3.0 | 3.0.x |
| microsoft / internet_information_server | 3.0 | 3.0.x |
| microsoft / internet_information_server | 4.0 | 4.0.x |
| microsoft / data_access_components | 1.5 | 1.5.x |
| microsoft / data_access_components | 2.0 | 2.0.x |
| microsoft / data_access_components | 2.1 | 2.1.x |
| microsoft / index_server | 2.0 | 2.0.x |