CVEvulnerability

CVE-2000-0770

6.4 MEDIUM Published 2000-10-20 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2000-10-20
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N

Description

IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, which could allow remote attackers to bypass access restrictions to some files, aka the "File Permission Canonicalization" vulnerability.

Affected configurations

• microsoft internet information server 4.0 • microsoft internet information services 5.0

References

http://www.securityfocus.com/bid/1565 Patch, Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-057 docs.microsoft.com
http://www.securityfocus.com/bid/1565 Patch, Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-057 docs.microsoft.com