PT-2001-1143 · Microsoft · Iis

Published 2001-01-09 · Updated 2018-10-30 · CVE-2000-1104

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IIS (affected versions not specified)

Description A variant of the IIS Cross-Site Scripting issue allows a malicious web site operator to embed scripts in a link to a trusted site. These scripts are returned without quoting in an error message back to the client, which then executes them in the same context as the trusted site.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2000-1104

Affected Products

Iis

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2000-1104 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-060 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1104 · Note