Vulnerability in Microsoft Commercial Internet System
CVE-2000-0246
IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.
EPSS: 0.800 (99.6th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Commercial_internet_system — versions 2.0, 2.5
- Microsoft Internet_information_server — versions 4.0
- Microsoft Internet_information_services — versions 5.0
- Microsoft Proxy_server — versions 2.0
- Microsoft Site_server — versions 3.0
- Microsoft Site_server_commerce — versions 3.0
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_MS, vendor-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_MSKB)
- cve@mitre.org (vdb-entry, x_refsource_BID)