Lucene search

[email protected]CVE-2000-0886

HistoryJan 22, 2001 - 5:00 a.m.

CVE-2000-0886

2001-01-2205:00:00

[email protected]

web.nvd.nist.gov

iis 5.0

remote attack

malformed request

command execution

vulnerability

cve-2000-0886.

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.96 High

EPSS

Percentile

99.5%

JSON

IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the “Web Server File Request Parsing” vulnerability.

Affected configurations

NVD

Node

microsoftinternet_information_serverMatch4.0

microsoftinternet_information_servicesMatch5.0

CPENameOperatorVersion
microsoft:internet_information_servermicrosoft internet information servereq4.0
microsoft:internet_information_servicesmicrosoft internet information serviceseq5.0

CPE	Name	Operator	Version
microsoft:internet_information_server	microsoft internet information server	eq	4.0
microsoft:internet_information_services	microsoft internet information services	eq	5.0

References

www.securityfocus.com/bid/1912

www.securityfocus.com/templates/archive.pike?mid=143604&list=1&fromthread=0&end=2000-11-11&threads=0&start=2000-11-05&

docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-086

exchange.xforce.ibmcloud.com/vulnerabilities/5470

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A191

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.96 High

EPSS

Percentile

99.5%

JSON

Related for CVE-2000-0886

securityvulns2 cvelist1 nessus1 nvd1