CVE Catalog
CVE-1999-0253
HighExploitation Probability (EPSS)
Very high risk8.17%
94th percentile - higher than 94% of all known CVEs
Summary
IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a dot in the URL.
Risk Assessment
The organization may be exposed to the disclosure of sensitive information contained in the source code of ASP applications, potentially leading to further attacks.
Recommendation
It is recommended to upgrade to a newer version of IIS and implement additional security measures to prevent access to the source code.
Original NVD description (English source)
IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) in the URL.