CVE-2000-0126

Medium

Published: 26/01/2000(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

45.66%

99th percentile - higher than 99% of all known CVEs

Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.

Attackers may gain access to sensitive data on the server, potentially leading to serious security breaches.

It is recommended to upgrade to a newer version of IIS and implement appropriate security measures to block .. (dot dot) attacks.

Original NVD description (English source)

Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.