Description

IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.

Remediation

References

CVE-2000-0884

Related Vulnerabilities

WordPress Plugin Pondol Carousel Cross-Site Scripting (1.0)

WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions SQL Injection (2.6.6)

TYPO3 7PK - Security Features Vulnerability (CVE-2016-5091)

PHP Improper Resource Shutdown or Release Vulnerability (CVE-2015-3415)

Oracle Application Server Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2018-5407)

Severity

High

Classification

CVE-2000-0884

Tags

Missing Update Known Vulnerabilities