Lucene search
HistoryOct 20, 2000 - 4:00 a.m.
CVE-2000-0770
iis 4.0
iis 5.0
file permission canonicalization vulnerability
nvd
cve-2000-0770
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.5%
IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, which could allow remote attackers to bypass access restrictions to some files, aka the “File Permission Canonicalization” vulnerability.
Affected configurations
Node
microsoftinternet_information_serverMatch4.0
ORmicrosoftinternet_information_servicesMatch5.0
Related
nvd
nvd
CVE-2000-0770
2000-10-20 04:00:00
cvelist
cvelist
CVE-2000-0770
2000-10-13 04:00:00
nessus
nessus
MS02-001: Trusted Domain SID Remote Privilege Escalation (311401)
2003-03-12 00:00:00
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.5%
Related for CVE-2000-0770