VULNERABILITY INTELLIGENCE
CVE-2001-0507
CVSS score7.2 HIGH
EPSS probability8.85%
CISA KEVNot currently listed
Published2001-09-20
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka the "System file listing privilege elevation" vulnerability.