← Database

CVE-2000-0024

MEDIUM CVSS: 6.4 Published: 1999-12-21 Modified: 2026-06-16

Description

IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability.

Affected Platforms

Microsoft Site Server CommerceMicrosoft Internet Information ServerMicrosoft Site Server

Weakness Type

NVD-CWE-Other

References