PT-2000-1862 · Microsoft · Iis

Published 2000-12-19 · Updated 2018-10-30 · CVE-2000-0951

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IIS version 5.0

Description A misconfiguration in IIS with Index Server enabled and the Index property set allows remote attackers to list directories in the web root via a Web Distributed Authoring and Versioning (WebDAV) search.

Recommendations For IIS version 5.0, consider disabling the Index Server or restricting access to the WebDAV search functionality to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2000-0951

Affected Products

Iis

References · 7

• 🔥 http://securityfocus.com/bid/1756 · Exploit
• 🔥 https://exploit-db.com/exploits/20269 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0951 · Security Note
• http://atstake.com/research/advisories/2000/a100400-1.txt · Note
• http://microsoft.com/technet/support/kb.asp?ID=272079 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0951 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5335 · Note