CVE-2000-0024

Currently unrated

Key Information:

Vendor: Microsoft
Status: Site Server; Internet Information Server; Site Server Commerce
Vendor: CVE Published:; 21 December 1999

Summary

IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability.

References

http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN...

vendor-advisoryx_refsource_MSKB

http://www.acrossecurity.com/aspr/ASPR-1999-11-10-1-PUB.txt

x_refsource_MISC

https://docs.microsoft.com/en-us/security-updates/securit...

vendor-advisoryx_refsource_MS

Timeline

Vulnerability Reserved
Jan 11, 2000
Vulnerability published
Dec 21, 1999

Collectors

NVD DatabaseMitre Database