CVE-2000-0770

medium · 6.4

IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, which could allow remote attackers to bypass access restrictions to some files, aka the "File Permission Canonicalization" vulnerability.

6.4

CVSS

15.1%

EPSS (exploit prob.)

97th

EPSS percentile

2000-10-20

Published

AV:N/AC:L/Au:N/C:P/I:P/A:N

Affected products

Vendor	Product	Affected versions
microsoft	internet_information_server	4.0
microsoft	internet_information_services	5.0

Check a specific version with /api/v1/cve/match.

References

http://www.securityfocus.com/bid/1565
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-057
http://www.securityfocus.com/bid/1565
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-057

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2000-0770