Vulnerability in Microsoft Internet Information Server

CVE-2000-1090

Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malformed URL that uses the lead-byte of a double-byte character.

EPSS: 0.167 (96.7th percentile) — read the EPSS interpretation.

Affected products

Microsoft Internet_information_server — versions 4.0, 5.0
N/a — versions n/a

References

cve@mitre.org (x_refsource_MISC, Broken Link)
cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)