CVE-2000-0246

No fix known EPSS 80%

IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.

Published 2000-06-02 · CVE record · OSV

Products: microsoft commercial_internet_system, microsoft internet_information_server, microsoft internet_information_services, microsoft proxy_server, microsoft site_server, microsoft site_server_commerce