CVE ID:	CVE-2001-0507
Description:	IIS 5.0 uses relative paths to find system files that will run in- process, which allows local users to gain privileges via a Trojan horse file, aka the "System file listing privilege elevation" vulnerability.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2001-0507 Bugtraq: 20010816 ENTERCEPT SECURITY ALERT: Privilege Escalation Vulnerability in Microsoft IIS (Google Search) http://online.securityfocus.com/archive/1/205069 Computer Incident Advisory Center Bulletin: L-132 http://www.ciac.org/ciac/bulletins/l-132.shtml Microsoft Security Bulletin: MS01-044 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-044 http://www.osvdb.org/5607 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A909 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A912 XForce ISS Database: iis-relative-path-privilege-elevation(6985) https://exchange.xforce.ibmcloud.com/vulnerabilities/6985