CVE-2000-0884

🗓️ 22 Jan 2001 05:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 200 Views🌐 WEB

IIS 4.0, 5.0 vulnerability permitting external reading of documents, potential execution via UNICODE URLs

Reporter	Title	Published	Views	Family All 23
Check Point Advisories	Microsoft IIS Input Validation Directory Traversal (CVE-2000-0884)	17 Mar 201400:00	–	checkpoint_advisories
Check Point Advisories	Microsoft IIS EXE W32 Storm Worm Command Execution - Ver2 (CVE-2000-0884)	16 Apr 201400:00	–	checkpoint_advisories
Cvelist	CVE-2000-0884	22 Jan 200105:00	–	cvelist
Exploit DB	Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (6)	18 Nov 200000:00	–	exploitdb
Exploit DB	Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (9)	18 Nov 200000:00	–	exploitdb
Exploit DB	Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (7)	18 Nov 200000:00	–	exploitdb
Exploit DB	Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (8)	18 Nov 200000:00	–	exploitdb
Exploit DB	Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (1)	17 Oct 200000:00	–	exploitdb
Exploit DB	Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (2)	21 Oct 200000:00	–	exploitdb
Exploit DB	Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (3)	17 Oct 200000:00	–	exploitdb

NVD

Node

Source	Link
osvdb	www.osvdb.org/436
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-078
securityfocus	www.securityfocus.com/bid/1806
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/5377
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A44

Parameter	Position	Path	Description	CWE
cmd.exe?/c+	path	/winnt/system32/cmd.exe?/c+	Unicode/URL-encoded traversal to execute arbitrary commands via IIS Web Server Folder Traversal vulnerability	CWE-22
root.exe?/c+	path	/MSADC/root.exe?/c+	Traversal to reach and execute commands on system via MSADC endpoints	CWE-22
cmd.exe?/c+	path	/cgi-bin/..%%35%63../winnt/system32/cmd.exe?/c+	Unicode/percent-encoded directory traversal to invoke system cmd on IIS	CWE-22
cmd.exe?/c+	path	/_vti_bin/..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+	Traversal to access system32 cmd.exe through problematic path (Vulnerability described)	CWE-22

16 Jun 2026 21:52Current

7High risk

Vulners AI Score7

CVSS 27.5

EPSS0.72073