Test ID:	1.3.6.1.4.1.25623.1.0.10537
Category:	Web Servers
Title:	Microsoft IIS Directory Traversal Vulnerability (MS00-078) - Active Check
Summary:	The remote IIS server allows anyone to execute arbitrary commands; by adding a unicode representation for the slash character in the requested path.
Description:	Summary: The remote IIS server allows anyone to execute arbitrary commands by adding a unicode representation for the slash character in the requested path. Solution: The vendor has releases updates. Please see the references for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2000-0884 BugTraq ID: 1806 http://www.securityfocus.com/bid/1806 Bugtraq: 20001017 IIS %c1%1c remote command execution (Google Search) Microsoft Security Bulletin: MS00-078 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-078 http://www.osvdb.org/436 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A44 XForce ISS Database: iis-unicode-translation(5377) https://exchange.xforce.ibmcloud.com/vulnerabilities/5377
Copyright	Copyright (C) 2001 HD Moore

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.