CVE-2000-0884

תיאור (מקור, אנגלית)

IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.

מדדים

EPSS — סבירות ניצול

63% (אחוזון 99) נכון ל-1 בנובמבר 2026

מוצרים מושפעים

microsoft: internet information server; microsoft: internet information services

קישורים

• http://www.osvdb.org/436
• http://www.securityfocus.com/bid/1806
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-‮…
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5377
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval‮…
• http://www.osvdb.org/436
• http://www.securityfocus.com/bid/1806
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-‮…
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5377
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval‮…