3 matches found
Microsoft IIS ida idq Information Disclosure - Ver2 (CVE-2000-0071)
An information disclosure vulnerability has been reported in Microsoft Internet Information Server. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Microsoft IIS IDA/IDQ Path Disclosure Vulnerability (MS00-006) - Active Check
IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions. SPDX-FileCopyrightText: 2000 Filipe Custodio Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
CVE-2000-0071
Microsoft IIS 4.0 is affected by CVE-2000-0071 via an information-disclosure path in the IDA/IDQ handling. A remote attacker can request non-existent files with .ida or .idq extensions to obtain the real document-root pathname, potentially aiding further targeted attacks. The issue is evidenced i...