CVE-2000-0884

No fix known EPSS 63%

IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.

Published 2001-01-22 · CVE record · OSV

Products: microsoft internet_information_server, microsoft internet_information_services