CVE-2000-0025
Last modified
CVE-2000-0025 is a vulnerability of currently unknown severity. IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll, aka the "Virtual Directory Naming" vulnerability.. EPSS estimates a 34.85% chance of exploitation in the next 30 days.
Description
IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll, aka the "Virtual Directory Naming" vulnerability.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Internet Information Server | 4.0 |
| Microsoft | Site Server | 3.0 |
| Microsoft | Site Server Commerce | 3.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2000-0025?
How severe is CVE-2000-0025?
How do I fix CVE-2000-0025?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2000
- CVE-2000-0019IMail POP3 daemon uses weak encryption, which allows local u…
- CVE-2000-0020DNS PRO allows remote attackers to conduct a denial of servi…
- CVE-2000-0021Lotus Domino HTTP server allows remote attackers to determin…
- CVE-2000-0022Lotus Domino HTTP server does not properly disable anonymous…
- CVE-2000-0023Buffer overflow in Lotus Domino HTTP server allows remote at…
- CVE-2000-0024IIS does not properly canonicalize URLs, potentially allowin…
- CVE-2000-0026Buffer overflow in UnixWare i2odialogd daemon allows remote …
- CVE-2000-0027IBM Network Station Manager NetStation allows local users to…
- CVE-2000-0028Internet Explorer 5.0 and 5.01 allows remote attackers to by…
- CVE-2000-0029UnixWare pis and mkpis commands allow local users to gain pr…
- CVE-2000-0030Solaris dmispd dmi_cmd allows local users to fill up restric…
- CVE-2000-0031The initscripts package in Red Hat Linux allows local users …
Are you affected by CVE-2000-0025?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST