PT-2000-1062 · Microsoft · Iis

Publicado 2000-01-11 · Atualizado 2018-10-30 · CVE-2000-0071

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IIS version 4.0

Description A remote attacker can obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions.

Recommendations For IIS version 4.0, consider restricting access to files with .ida and .idq extensions to prevent disclosure of the document root pathname.

Correção

Identificadores relacionados

CVE-2000-0071

Produtos afetados

Iis

Referências · 4

• http://marc.info/?l=bugtraq&m=94780058006791&w=2 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0071 · Nota
• http://marc.info/?l=bugtraq&m=94770020309953&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0071 · Nota de Segurança