CVE-2000-0246

MEDIUM CVSS: 5.0 Published: 2000-03-30 Modified: 2026-06-16

Description

IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.

Affected Platforms

Microsoft Commercial Internet SystemMicrosoft Site Server CommerceMicrosoft Site ServerMicrosoft Internet Information ServicesMicrosoft Internet Information ServerMicrosoft Proxy Server

Weakness Type

NVD-CWE-Other

References

http://www.microsoft.com/technet/support/kb.asp?ID=249599
http://www.securityfocus.com/bid/1081
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-01…
http://www.microsoft.com/technet/support/kb.asp?ID=249599
http://www.securityfocus.com/bid/1081
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-01…