PT-2000-1862 · Microsoft · Iis

Publicado 2000-12-19 · Atualizado 2018-10-30 · CVE-2000-0951

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IIS version 5.0

Description A misconfiguration in IIS with Index Server enabled and the Index property set allows remote attackers to list directories in the web root via a Web Distributed Authoring and Versioning (WebDAV) search.

Recommendations For IIS version 5.0, consider disabling the Index Server or restricting access to the WebDAV search functionality to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2000-0951

Produtos afetados

Iis

Referências · 7

• 🔥 http://securityfocus.com/bid/1756 · Exploit
• 🔥 https://exploit-db.com/exploits/20269 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0951 · Nota de Segurança
• http://atstake.com/research/advisories/2000/a100400-1.txt · Nota
• http://microsoft.com/technet/support/kb.asp?ID=272079 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0951 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5335 · Nota