PT-2000-1702 · Microsoft · Iis

Publicado 2000-10-20 · Atualizado 2018-10-30 · CVE-2000-0770

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions IIS versions 4.0 through 5.0

Description The issue arises from improper restriction of access to certain file types when their parent folders have less restrictive permissions. This could allow remote attackers to bypass access restrictions to some files.

Recommendations For IIS version 4.0, update the permissions to properly restrict access to sensitive files. For IIS version 5.0, apply the same update to ensure that file access restrictions are properly enforced.

Correção

Identificadores relacionados

CVE-2000-0770

Produtos afetados

Iis

Referências · 4

• http://securityfocus.com/bid/1565 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2000-0770 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-057 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0770 · Nota