CVE Catalog

CVE-2000-0115

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
9.83%

95th percentile - higher than 95% of all known CVEs

Summary

IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page.

Risk Assessment

An attacker can exploit this vulnerability to disrupt access to IIS services, potentially leading to application downtime.

Recommendation

It is recommended to review and validate ASP scripts to avoid the use of invalid regular expressions.

Original NVD description (English source)

IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS