CVE-2000-0884

HighCVSS 7.5/10Last modified Sep 23, 2026

Description

IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published: Dec 19, 2000
Last modified: Sep 23, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-08857.5Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long Browser Name in a CIF CVE-2000-08867.5IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with ope CVE-2000-08875.0named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request CVE-2000-08885.0named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv CVE-2000-08895.1Two Sun security certificates have been compromised, which could allow attackers to insert malicious code such as applets and make it appear CVE-2000-08901.2periodic in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows local users to overwrite arbitrary files via a symlink a CVE-2000-08917.5A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious program in an email CVE-2000-08922.6Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or CVE-2000-08935.0The presence of the Distributed GL Daemon (dgld) service on port 5232 on SGI IRIX systems allows remote attackers to identify the target hos CVE-2000-089410.0HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooti CVE-2000-089510.0Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arb CVE-2000-08965.0WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, which causes the firewal