high7.5Public exploit code
CVE-2000-0884
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNI…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (5)2000-10-17 · remote · windows · Verified
- Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (4)2000-10-17 · remote · windows · Verified
- Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (3)2000-10-17 · remote · windows · Verified
- Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (2)2000-10-21 · remote · windows · Verified
- Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (1)2000-10-17 · remote · windows · Verified
- Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (8)2000-11-18 · remote · windows · Verified
- Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (7)2000-11-18 · remote · windows · Verified
- Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (9)2000-11-18 · remote · windows · Verified
- Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (6)2000-11-18 · remote · windows · Verified
Impact
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Information Server | Version 4.0 |
| Microsoft | Internet Information Services | Version 5.0 |
References
- NVD record
- CVE.org record
- http://www.osvdb.org/436
- http://www.securityfocus.com/bid/1806
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-078
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5377
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A44
- http://www.osvdb.org/436
- http://www.securityfocus.com/bid/1806
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-078
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5377
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A44