CVE-2000-1090 — Microsoft Internet Information Server vulnerability

3 documents3 sources
Severity
5.0MEDIUMNVD
EPSS
12.5%
top 6.05%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Internet Information Server
Timeline
PublishedFeb 12
Latest updateApr 30

Description

Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malformed URL that uses the lead-byte of a double-byte character.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-mjqq-wq8f-g4cx: Microsoft IIS for Far East editions 4↗2022-04-30
▶
CVEList
CVE-2000-1090: Microsoft IIS for Far East editions 4↗2001-02-02
▶
CVE-2000-1090 — Microsoft vulnerability | cvebase