IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, which could allow remote attackers to bypass access restrictions to some files, aka the "File Permission Canonicalization" vulnerability.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/1565 | Patch Vendor Advisory |
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-057 | |
| http://www.securityfocus.com/bid/1565 | Patch Vendor Advisory |
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-057 |
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:33
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/1565 - Patch, Vendor Advisory | |
| References | () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-057 - |
Information
Published : 2000-10-20 04:00
Updated : 2024-11-20 23:33
NVD link : CVE-2000-0770
Mitre link : CVE-2000-0770
CVE.ORG link : CVE-2000-0770
JSON object : View
Products Affected
microsoft
- internet_information_server
- internet_information_services
CWE