VULNERABILITY INTELLIGENCE

CVE-2000-0770

CVSS score6.4 MEDIUM
EPSS probability15.08%
CISA KEVNot currently listed
Published2000-10-20
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:N

Description

IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, which could allow remote attackers to bypass access restrictions to some files, aka the "File Permission Canonicalization" vulnerability.

Primary references