CVE-2001-0333

EPSS 84.47%
Veröffentlicht 27.06.2001 04:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and "\" characters twice.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 12

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Internet Information Server Version <= 5.0

Microsoft ≫ Internet Information Server Version4.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	84.47%	0.993

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://marc.info/?l=bugtraq&m=98992056521300&w=2

http://www.cert.org/advisories/CA-2001-12.html

US Government Resource

http://www.securityfocus.com/bid/2708

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-026

https://exchange.xforce.ibmcloud.com/vulnerabilities/6534

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1018

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1051

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A37

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A78

https://nvd.nist.gov/vuln/detail/CVE-2001-0333

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2001-0333

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2001-0333

EUVD