PT-2000-1228 · Microsoft · Iis

Published 2000-03-30 · Updated 2018-10-30 · CVE-2000-0246

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IIS versions 4.0 through 5.0

Description The issue arises from improper ISAPI extension processing when a virtual directory is mapped to a UNC share. This allows remote attackers to read the source code of ASP and other files.

Recommendations For IIS versions 4.0 through 5.0, consider remapping virtual directories to local paths instead of UNC shares to prevent exploitation. Additionally, restrict access to sensitive files and directories to minimize the risk of source code disclosure.

Exploit

Fix

Related Identifiers

CVE-2000-0246

Affected Products

Iis

References · 6

• 🔥 https://exploit-db.com/exploits/19824 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0246 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0246 · Note
• http://microsoft.com/technet/support/kb.asp?ID=249599 · Note
• http://securityfocus.com/bid/1081 · Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-019 · Note