← Database

CVE-2000-0025

MEDIUM CVSS: 5.0 Published: 1999-12-21 Modified: 2026-06-16

Description

IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll, aka the "Virtual Directory Naming" vulnerability.

Affected Platforms

Microsoft Site Server CommerceMicrosoft Internet Information ServerMicrosoft Site Server

Weakness Type

NVD-CWE-Other

References