PT-2000-1228 · Microsoft · Iis

Publicado 2000-03-30 · Atualizado 2018-10-30 · CVE-2000-0246

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IIS versions 4.0 through 5.0

Description The issue arises from improper ISAPI extension processing when a virtual directory is mapped to a UNC share. This allows remote attackers to read the source code of ASP and other files.

Recommendations For IIS versions 4.0 through 5.0, consider remapping virtual directories to local paths instead of UNC shares to prevent exploitation. Additionally, restrict access to sensitive files and directories to minimize the risk of source code disclosure.

Exploit

Correção

Identificadores relacionados

CVE-2000-0246

Produtos afetados

Iis

Referências · 6

• 🔥 https://exploit-db.com/exploits/19824 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0246 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0246 · Nota
• http://microsoft.com/technet/support/kb.asp?ID=249599 · Nota
• http://securityfocus.com/bid/1081 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-019 · Nota