medium5.0Public exploit code
CVE-1999-0154
IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a .
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft IIS 2.0/3.0 - Appended Dot Script Source Disclosure1997-02-20 · remote · windows · Verified
Impact
IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Information Server | Version 3.0 |
| Microsoft | Internet Information Services | Version 2.0 |