← Database
CVE-1999-0253
HIGH
CVSS: 7.5
Published: 1997-01-01
Modified: 2026-06-16
Description
IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) in the URL.
Affected Platforms
Microsoft Internet Information ServerMicrosoft Internet Information Services
Weakness Type
NVD-CWE-Other