CVE-2001-0507observed exploitation

CVE-2001-0507

Published · Updated

Follow this CVE

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

45Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck, has a public proof of concept and 1 threat group(s) use it.

ssvc Actepss 8.8%
from disclosure to weaponsame day
Published on NVDMar 9
1st PoCAug 15
VulnCheck+6877d
Who exploits it — 1

Groups known to exploit this vulnerability (MITRE ATT&CK attribution).

APT / StateFIN13 MITRE ATT&CK
IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka the "System file listing privilege elevation" vulnerability.
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.