CVE Database · CVE-2001-0333
CVSS v3.1
N/A
EPSS
90.77%
Published
Jun 27, 2001
Modified
Apr 15, 2026
Public PoC / Exploit (9)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and "\" characters twice.
Affected Products (2)
References (18)
