CVE-2000-1090

medium · 5

Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malformed URL that uses the lead-byte of a double-byte character.

CVSS

16.7%

EPSS (exploit prob.)

97th

EPSS percentile

2001-02-12

Published

AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

Vendor	Product	Affected versions
microsoft	internet_information_server	4.0
microsoft	internet_information_server	5.0

Check a specific version with /api/v1/cve/match.

References

http://www.nsfocus.com/english/homepage/sa_08.htm
http://www.securityfocus.com/bid/2100
https://exchange.xforce.ibmcloud.com/vulnerabilities/5729
http://www.nsfocus.com/english/homepage/sa_08.htm
http://www.securityfocus.com/bid/2100
https://exchange.xforce.ibmcloud.com/vulnerabilities/5729

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2000-1090