CVE-2000-0025

published 1999-12-21

CVE-2000-0025: IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such…

medium 5 CVSS 3.1

AV N AC L Au N C P I N A N

IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll, aka the "Virtual Directory Naming" vulnerability.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
microsoft	internet_information_server	—	—
microsoft	site_server	—	—
microsoft	site_server_commerce	—	—