CVE-2000-0770

IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, which could allow remote attackers to bypass access restrictions to some files, aka the "File Permission Canonicalization" vulnerability.

CVSS Metrics

Affected Products (2)

GitHub Security Advisory GHSA-8wcg-8pwm-v3gc

IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent...

References (4)

• http://www.securityfocus.com/bid/1565 Patch, Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-057
• http://www.securityfocus.com/bid/1565 Patch, Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-057