← Database

CVE-2000-0884

HIGH CVSS: 7.5 Published: 2000-12-19 Modified: 2026-06-16

Description

IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.

Affected Platforms

Microsoft Internet Information ServerMicrosoft Internet Information Services

Weakness Type

NVD-CWE-Other

References