Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2000-0884
Description:IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.
Test IDs: 1.3.6.1.4.1.25623.1.0.101014   1.3.6.1.4.1.25623.1.0.10537  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2000-0884
BugTraq ID: 1806
http://www.securityfocus.com/bid/1806
Bugtraq: 20001017 IIS %c1%1c remote command execution (Google Search)
Microsoft Security Bulletin: MS00-078
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-078
http://www.osvdb.org/436
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A44
XForce ISS Database: iis-unicode-translation(5377)
https://exchange.xforce.ibmcloud.com/vulnerabilities/5377




© 1998-2024 E-Soft Inc. All rights reserved.