Internet Information Services Other Vulnerability - CVE-2000-0770 - Vulnerability Database

Internet Information Services Other Vulnerability - CVE-2000-0770

Medium
Reference: CVE-2000-0770
Title: Internet Information Services Other Vulnerability
Overview:

IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions which could allow remote attackers to bypass access restrictions to some files aka the quotFile Permission Canonicalizationquot vulnerability.