Description

IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.

Remediation

References

CVE-2000-0246

Related Vulnerabilities

MySQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-0375)

WordPress Plugin Passster-Password Protection Security Bypass (3.5.5.8)

WebLogic Observable Discrepancy Vulnerability (CVE-2019-3740)

Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-16893)

WordPress Plugin Ibtana-Ecommerce Product Addons Cross-Site Scripting (0.2.3)

Severity

Medium

Classification

CVE-2000-0246

Tags

Missing Update Known Vulnerabilities