Vulnerability Description
IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, which could allow remote attackers to bypass access restrictions to some files, aka the "File Permission Canonicalization" vulnerability.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Internet Information Server | 4.0 |
| Microsoft | Internet Information Services | 5.0 |
References
- http://www.securityfocus.com/bid/1565PatchVendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-05
- http://www.securityfocus.com/bid/1565PatchVendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-05
FAQ
What is CVE-2000-0770?
CVE-2000-0770 is a vulnerability with a CVSS score of 6.4 (MEDIUM). IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, which could allow remote attackers to bypass access restriction...
How severe is CVE-2000-0770?
CVE-2000-0770 has been rated MEDIUM with a CVSS base score of 6.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2000-0770?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Internet Information Server, Microsoft Internet Information Services.