CVE-2000-0258

HighCVSS 7.5

Published: 12/04/2000(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

19.61%

97th percentile - higher than 97% of all known CVEs

Summary

IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped characters, known as the 'Myriad Escaped Characters' Vulnerability.

Risk Assessment

Attackers can disrupt access to IIS services, leading to application downtime and potential financial losses for the organization.

Recommendation

It is recommended to upgrade to a newer version of IIS and monitor server logs for unusual traffic patterns.

Original NVD description (English source)

IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped characters, aka the "Myriad Escaped Characters" Vulnerability.