CVE-2000-0246 in IIS

Riassunto

di MITRE

IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Divulgazione: 30/03/2000
• Moderazione: accettato
• Voce: VDB-15416
• CPE: pronto
• CWE: CWE-200 (confermato)
• Sfruttamento: Scaricare
• CVSS: 5.0 (NVD)
• EPSS: 0.79976
• KEV: no
• Attività: molto basso
• Settore: Energy, Agriculture, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2000-0246
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2000-0246
• CVE Details: https://www.cvedetails.com/cve/CVE-2000-0246/