CVE-2000-0246

IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:commercial_internet_system:2.0:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:commercial_internet_system:2.5:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:proxy_server:2.0:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:site_server:3.0:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:site_server_commerce:3.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2000-03-30 05:00

Updated : 2024-02-04 16:31


NVD link : CVE-2000-0246

Mitre link : CVE-2000-0246

CVE.ORG link : CVE-2000-0246


JSON object : View

Products Affected

microsoft

  • site_server
  • internet_information_services
  • site_server_commerce
  • internet_information_server
  • proxy_server
  • commercial_internet_system