CVE-2000-0071
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
30Vexday Risk Score
Prioritize patching. It exploitation observed in the wild.
ssvc Attendepss 28%
from disclosure to weapon
Published on NVDFeb 4
Observed exploitationJan 11
IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions.
Affected products
n/a · n/a