Test ID:	10537
Category:	Web Servers
Title:	IIS directory traversal
Summary:	The remote IIS server allows anyone to execute arbitrary commands; by adding a unicode representation for the slash character in the requested path.
Description:	Summary: The remote IIS server allows anyone to execute arbitrary commands by adding a unicode representation for the slash character in the requested path. Solution: The vendor has releases updates. Please see the references for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	BugTraq ID: 1806 Common Vulnerability Exposure (CVE) ID: CVE-2000-0884 http://www.securityfocus.com/bid/1806 Bugtraq: 20001017 IIS %c1%1c remote command execution (Google Search) Microsoft Security Bulletin: MS00-078 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-078 http://www.osvdb.org/436 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A44 XForce ISS Database: iis-unicode-translation(5377) https://exchange.xforce.ibmcloud.com/vulnerabilities/5377
Copyright	Copyright (C) 2001 H D Moore

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.