CVE Catalog
CVE-2000-0071
MediumExploitation Probability (EPSS)
Very high risk28.06%
98th percentile - higher than 98% of all known CVEs
Summary
IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions.
Risk Assessment
An attacker could exploit this vulnerability to gain information about the file system structure, potentially leading to further attacks on the server.
Recommendation
It is recommended to block access to files with .ida and .idq extensions and to upgrade to a newer version of IIS to minimize risk.
Original NVD description (English source)
IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions.