Vulnerability Details CVE-2000-0071
IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.714
EPSS Ranking 98.6%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2000-0071
-
cpe:2.3:a:microsoft:internet_information_server:3.0
-
cpe:2.3:a:microsoft:internet_information_server:4.0
-
cpe:2.3:a:microsoft:internet_information_services:5.0