CVE-2001-0333

EPSS 90.8%

Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and "\" characters twice.

Affected products

n/a · n/a

public PoCs found — 9

exploitdbwww.exploit-db.com/exploits/20835unverified exploitdbwww.exploit-db.com/exploits/20836unverified exploitdbwww.exploit-db.com/exploits/20837unverified exploitdbwww.exploit-db.com/exploits/20838unverified exploitdbwww.exploit-db.com/exploits/20839unverified exploitdbwww.exploit-db.com/exploits/20840unverified exploitdbwww.exploit-db.com/exploits/20841unverified exploitdbwww.exploit-db.com/exploits/20842unverified exploitdbwww.exploit-db.com/exploits/16467unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://marc.info/?l=bugtraq&m=98992056521300&w=2 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-026 https://exchange.xforce.ibmcloud.com/vulnerabilities/6534 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1018 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1051 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A37 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A78 http://www.cert.org/advisories/CA-2001-12.html http://www.securityfocus.com/bid/2708