CVE-2000-0024 | BDVDB-2026-1088 Detail

Description#

IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ246401
http://www.acrossecurity.com/aspr/ASPR-1999-11-10-1-PUB.txt
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-061

Exploit#

No public exploit known

History#

Version 12000-04-25Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.