Description

IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, which could allow remote attackers to bypass access restrictions to some files, aka the "File Permission Canonicalization" vulnerability.

Remediation

References

CVE-2000-0770

Related Vulnerabilities

MySQL CVE-2021-2036 Vulnerability (CVE-2021-2036)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Unspecified Vulnerability (2.1.12)

MongoDb Improper Input Validation Vulnerability (CVE-2019-2389)

WordPress Plugin Answer My Question SQL Injection (1.3)

WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress Cross-Site Scripting (3.1.10)

Severity

Medium

Classification

CVE-2000-0770

Tags

Missing Update Known Vulnerabilities