5
CVSSv2

CVE-2000-0126

Published: 26/01/2000 Updated: 17/08/2022
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote malicious users to read files via a .. (dot dot) attack.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft internet information server 3.0

microsoft internet information server 4.0

Exploits

source: wwwsecurityfocuscom/bid/968/info A vulnerability in idqdll can allow an attacker to gain read access to any file on the same logical drive as the web server virtual root The attacker has to know the physical path and filename of the requested file, and the ACL for the file must specify read access for either the anonymous user o ...