CVE-2000-0770

No fix known EPSS 15%

IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, which could allow remote attackers to bypass access restrictions to some files, aka the "File Permission Canonicalization" vulnerability.

Published 2000-10-13 · CVE record · OSV

Products: microsoft internet_information_server, microsoft internet_information_services