CVE-2001-0333

2001-06-2704:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

200

cve-2001-0333

iis 5.0

directory traversal vulnerability

remote attackers

nvd

7.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.05 Low

EPSS

Percentile

92.7%

JSON

Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding … (dot dot) and "" characters twice.

CPENameOperatorVersion
microsoft:internet_information_servermicrosoft internet information serverle5.0
microsoft:internet_information_servermicrosoft internet information servereq4.0

CPE	Name	Operator	Version
microsoft:internet_information_server	microsoft internet information server	le	5.0
microsoft:internet_information_server	microsoft internet information server	eq	4.0