cbcvebase.
CVE-2000-0770
published 2000-10-20

CVE-2000-0770: IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, which could allow…

medium6.4CVSS 3.1
AVNACLAuNCPIPAN
IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, which could allow remote attackers to bypass access restrictions to some files, aka the "File Permission Canonicalization" vulnerability.

Affected

2 ranges
VendorProductVersion rangeFixed in
microsoftinternet_information_server——
microsoftinternet_information_services——