Vulnerability Details CVE-2000-0246
IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.836
EPSS Ranking 99.2%
CVSS Severity
CVSS v2 Score 5.0
References
- http://www.microsoft.com/technet/support/kb.asp?ID=249599
- http://www.securityfocus.com/bid/1081
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-019
- http://www.microsoft.com/technet/support/kb.asp?ID=249599
- http://www.securityfocus.com/bid/1081
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-019
Products affected by CVE-2000-0246
-
cpe:2.3:a:microsoft:commercial_internet_system:2.0
-
cpe:2.3:a:microsoft:commercial_internet_system:2.5
-
cpe:2.3:a:microsoft:internet_information_server:4.0
-
cpe:2.3:a:microsoft:internet_information_services:5.0
-
cpe:2.3:a:microsoft:proxy_server:2.0
-
cpe:2.3:a:microsoft:site_server:3.0
-
cpe:2.3:a:microsoft:site_server_commerce:3.0