VULNERABILITY INTELLIGENCE

CVE-2000-0631

CVSS score5 MEDIUM
EPSS probability24.72%
CISA KEVNot currently listed
Published2000-07-14
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing the script without a particular argument, aka the "Absent Directory Browser Argument" vulnerability.

Primary references