CVE-2000-0884
HIGH 7.5EPSS 63.3%
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.
- CVSS v2.0 NVD
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 63.28% chance of exploitation in the next 30 days, 99th percentile
- Published
- 2001-01-22
- Updated
- 2024-08-08
ExploitDB entries (8)
- https://www.exploit-db.com/exploits/20302
- https://www.exploit-db.com/exploits/20301
- https://www.exploit-db.com/exploits/20300
- https://www.exploit-db.com/exploits/20299
- https://www.exploit-db.com/exploits/20298
- https://www.exploit-db.com/exploits/192
- https://www.exploit-db.com/exploits/191
- https://www.exploit-db.com/exploits/190
Security advisories
- http://www.securityfocus.com/bid/1806
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-078