CVE-2000-0884

CVE Database · CVE-2000-0884

CVE-2000-0884

· N/AModified

CVSS v3.1

N/A

EPSS

72.70%

Published

Dec 19, 2000

Modified

Apr 15, 2026

Public PoC / Exploit (10)

All weaponized →

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.

Affected Products (2)

microsoft · internet_information_servervulnerable

microsoft · internet_information_servicesvulnerable

References (10)

http://www.osvdb.org/436

http://www.securityfocus.com/bid/1806

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-078

https://exchange.xforce.ibmcloud.com/vulnerabilities/5377

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A44

http://www.osvdb.org/436

http://www.securityfocus.com/bid/1806

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-078

https://exchange.xforce.ibmcloud.com/vulnerabilities/5377

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A44

KEV Catalog EPSS Scores Vendors All CVEs