Description

IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.

Remediation

References

CVE-2000-0246

Related Vulnerabilities

WordPress Plugin BitMonet Cross-Site Scripting (1.0)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20520)

WordPress Plugin WP Inventory Manager Unspecified Vulnerability (1.8.1)

WordPress Plugin Login/Signup Popup (Inline Form + Woocommerce) Cross-Site Request Forgery (2.2)

Jenkins Session Fixation Vulnerability (CVE-2018-1000409)

Severity

Medium

Classification

CVE-2000-0246

Tags

Missing Update Known Vulnerabilities