CVE-2000-0770 | BDVDB-2026-1677 Detail

Description#

IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, which could allow remote attackers to bypass access restrictions to some files, aka the "File Permission Canonicalization" vulnerability.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-057
http://www.securityfocus.com/bid/1565

Exploit#

No public exploit known

History#

Version 12000-10-13Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.