CVE-2000-0884 PUBLISHED CVSS 7.5 HIGH

IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.

EPSS 84.07% · 99.3th percentile

Risk Scores

CVSS v2.0
7.5
EPSS Score
84.07%
99.3th percentile

Affected Products

VendorProductVersions
microsoftinternet_information_services5.0
microsoftinternet_information_server4.0
n/an/an/a

Timeline

References

Open in Interactive Console →