Description

IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) in the URL.

Remediation

References

CVE-1999-0253

Related Vulnerabilities

Ruby on Rails Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-5189)

Envoy Proxy Improper Certificate Validation Vulnerability (CVE-2022-21657)

WordPress Plugin Count per Day Information Disclosure (3.2.5)

MediaWiki Improper Input Validation Vulnerability (CVE-2010-1189)

e107 Other Vulnerability (CVE-2004-2262)

Severity

High

Classification

CVE-1999-0253

Tags

Missing Update Known Vulnerabilities