vulnwire
7.5high

CVE-2000-0884in critical feed9 exploits

IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed U…

Published 25 y ago · modified 45 d ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
63.3%
percentile 99%
Public exploits
9
Exploit-DB

IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.

Exploit prediction (EPSS)

63.28% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

  • EDB-20302 Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (5) · remote · 2000-10-17
  • EDB-20301 Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (4) · remote · 2000-10-17
  • EDB-20300 Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (3) · remote · 2000-10-17
  • EDB-20299 Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (2) · remote · 2000-10-21
  • EDB-20298 Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (1) · remote · 2000-10-17
  • EDB-192 Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (8) · remote · 2000-11-18
  • EDB-191 Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (7) · remote · 2000-11-18
  • EDB-190 Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (9) · remote · 2000-11-18
  • EDB-189 Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (6) · remote · 2000-11-18

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A44 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • docs.microsoft.com /en-us/security-updates/securitybulletins/2000/ms00-078 · vendor-advisory, x_refsource_MS, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/5377 · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /bid/1806 · vdb-entry, x_refsource_BID, x_transferred
  • osvdb.org /436 · vdb-entry, x_refsource_OSVDB, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.