CVE-2000-0884
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed UR
CVSS
7.5
Sem CVSS
EPSS
63.3%
p99
KEV
—
Exploit Today
30
0-100
Publicado: 19 de dez. de 2000 · Última mod.: 23 de set. de 2026
63.3%EPSS · 30 dias63.3%
2026-10-082026-11-05
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.
- www.osvdb.orghttp://www.osvdb.org/436
- www.securityfocus.comhttp://www.securityfocus.com/bid/1806
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-078
- exchange.xforce.ibmcloud.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/5377
- oval.cisecurity.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A44
- www.osvdb.orghttp://www.osvdb.org/436
- www.securityfocus.comhttp://www.securityfocus.com/bid/1806
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-078
- exchange.xforce.ibmcloud.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/5377
- oval.cisecurity.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A44
Nenhum CVE relacionado por CWE ou produto.