CVE-2000-0126

medium

Microsoft

CVSS v3 Base Score

5.0

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS Score

84.7%

Exploitation probability in 30 days

Top 1% most likely to be exploited

Attack Characteristics

Attack Vector

Network

Attack Complexity

Low

Confidentiality

Integrity

None

Availability

None

Published: January 26, 2000 (9605 days ago)

Last Modified: April 16, 2026

Source: NVD

Description

Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.

NVD-CWE-Other

microsoft internet information server