CVE-1999-0253
HighExploitation Probability (EPSS)
Very high risk94th percentile - higher than 94% of all known CVEs
Summary
IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a dot in the URL.
Risk Assessment
The organization may be exposed to the disclosure of sensitive information contained in the source code of ASP applications, potentially leading to further attacks.
Recommendation
It is recommended to upgrade to a newer version of IIS and implement additional security measures to prevent access to the source code.
Other vulnerabilities in IIS 3.0
See all- CVE-2000-0226Medium
IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command, leading to memory exhaustion.
- CVE-2000-0115Medium
IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page.
- CVE-2000-0071Medium
IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions.
- CVE-1999-1233High
IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain. This is known as the 'Domain Resolution' vulnerability.
- CVE-1999-1223Medium
IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a large number of / (forward slash) characters.
- CVE-2000-0024Medium
IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters.
- CVE-1999-0867Medium
Vulnerability in IIS 4.0 allows a denial of service attack by flooding the server with HTTP requests containing malformed headers.
- CVE-1999-0874High
Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.
- CVE-1999-0407High
By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system.
- CVE-1999-0449High
The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query.asp, or (3) search.asp scripts.
Original NVD description (English source)
IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) in the URL.