CVE-1999-0154

Medium

Published: 31/12/1999(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

40.02%

98th percentile - higher than 98% of all known CVEs

IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a dot to the end of the URL.

Attackers may gain access to sensitive information contained in the application's source code, potentially leading to further attacks on the system.

It is recommended to upgrade to a newer version of IIS and implement appropriate security measures to prevent access to the source code.

Original NVD description (English source)

IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL.