CVE-2000-0884

high Microsoft
CVSS v3 Base Score
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS Score
84.1%
Exploitation probability in 30 days
Top 1% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
P
Integrity
P
Availability
P
Published: December 19, 2000 (9277 days ago)
Last Modified: April 16, 2026
Vendor: Microsoft
Source: NVD

Description

IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.

CWE

NVD-CWE-Other

Affected Products

microsoft internet information servermicrosoft internet information services

References

🔗 www.osvdb.org 🔗 www.securityfocus.com 🔗 docs.microsoft.com 🔗 exchange.xforce.ibmcloud.com 🔗 oval.cisecurity.org