CVE-2001-1243

Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an ASP program that uses Scripting.FileSystemObject to open a file with an MS-DOS device name, or (2) remotely injecting the device name into ASP programs that internally use Scripting.FileSystemObject.

• http://www.iss.net/security_center/static/6800.phpVendor Advisory
• http://www.securityfocus.com/archive/1/194919
• http://www.securityfocus.com/bid/2973Exploit, Patch, Vendor Advisory
• http://www.iss.net/security_center/static/6800.phpVendor Advisory
• http://www.securityfocus.com/archive/1/194919
• http://www.securityfocus.com/bid/2973Exploit, Patch, Vendor Advisory

Published

Jul 4, 2001

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2001-1237Phormation PHP script 0.9.1 and earlier allows remote attack…
• CVE-2001-1238Task Manager in Windows 2000 does not allow local users to e…7.8
• CVE-2001-1239PowerNet IX allows remote attackers to cause a denial of ser…
• CVE-2001-1240The default configuration of sudo in Engarde Secure Linux 1.…
• CVE-2001-1241Un-CGI 1.9 and earlier does not verify that a CGI script has…
• CVE-2001-1242Directory traversal vulnerability in Un-CGI 1.9 and earlier …
• CVE-2001-1244Multiple TCP implementations could allow remote attackers to…
• CVE-2001-1245Opera 5.0 for Linux does not properly handle malformed HTTP …
• CVE-2001-1246PHP 4.0.5 through 4.1.0 in safe mode does not properly clean…
• CVE-2001-1247PHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers …
• CVE-2001-1248vWebServer 1.2.0 allows remote attackers to view arbitrary A…
• CVE-2001-1249vWebServer 1.2.0 allows remote attackers to cause a denial o…