CVE-2000-0884 in the critical feed json
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed U…
published 2000-12-19 25 y ago modified 2026-09-23 46 d ago also EUVD-2000-0871
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 63.3%
- EPSS 63.3% chance of exploitation in 30 days, percentile 99.2%
- public exploits
- 9
- Exploit-DB
Summary
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.
Timeline
- First public exploit (EDB-20302)
- Published
Exploit prediction
63.28% chance of exploitation in the next 30 days, higher than 99.2% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-20302 Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (5) remote, 2000-10-17
- EDB-20301 Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (4) remote, 2000-10-17
- EDB-20300 Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (3) remote, 2000-10-17
- EDB-20299 Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (2) remote, 2000-10-21
- EDB-20298 Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (1) remote, 2000-10-17
- EDB-192 Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (8) remote, 2000-11-18
- EDB-191 Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (7) remote, 2000-11-18
- EDB-190 Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (9) remote, 2000-11-18
- EDB-189 Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (6) remote, 2000-11-18
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
docs.microsoft.com
/en-us/security-updates/securitybulletins/2000/ms00-078
vendor-advisory
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A44
vdb-entry, signature
-
exchange.xforce.ibmcloud.com
/vulnerabilities/5377
vdb-entry
-
securityfocus.com
/bid/1806
vdb-entry
-
osvdb.org
/436
vdb-entry
Sources
- CVE List CVE-2000-0884
- NVD CVE-2000-0884
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.