CVE-2000-0246

IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2000-03-30

Last modified

2024-08-08

Affected products

• Commercial Internet System (Microsoft)
• Internet Information Server (Microsoft)
• Internet Information Services (Microsoft)
• Proxy Server (Microsoft)
• Site Server (Microsoft)
• Site Server Commerce (Microsoft)

References

• http://www.microsoft.com/technet/support/kb.asp?ID=249599
• http://www.securityfocus.com/bid/1081
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-019