CVE-2000-0246 in IIS

Summary

IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Disclosure: 03/30/2000
• Moderation: VulDB entry created
• Entries: VDB-15416 (1)
• CPE: ready
• CWE: CWE-200 (Confirmed)
• Exploit: Download
• CVSS: 5.3
• EPSS: 0.83616
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2000-0246
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2000-0246
• CVE Details: https://www.cvedetails.com/cve/CVE-2000-0246/