CVE-2001-0333

Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. dot dot and "" characters twice...

CVE-2001-0333

A directory traversal vulnerability exists in Microsoft IIS 5.0 and earlier versions. The root cause is a flaw in how the web server handles CGI filename requests. Specifically, after the initial security check, IIS mistakenly performs a second decoding pass on the CGI filename. An attacker can e...

Immunity Canvas: IIS_DOUBLEDECODE

Name| iisdoubledecode ---|--- CVE| CVE-2001-0333 Exploit Pack| CANVAS Description| iisdoubledecode MS01-026 Notes| CVE Name: CVE-2001-0333 VENDOR: Microsoft Notes: The IIS Double Decode module will automatically use tftp to get a MOSDEF node on the remote target. This will not work through a...

CVE-2001-0333

Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. dot dot and "" characters twice...