Vulnerability in Microsoft Internet Information Services

CVE-2000-0951

A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web root via a Web Distributed Authoring and Versioning (WebDAV) search.

EPSS: 0.362 (98.3th percentile) — read the EPSS interpretation.

Affected products

Microsoft Internet_information_services — versions 5.0
N/a — versions n/a

References

cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (vendor-advisory, x_refsource_MSKB)
cve@mitre.org (x_refsource_ATSTAKE, vendor-advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)