CVE-2000-0951

Summary

A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web root via a Web Distributed Authoring and Versioning (WebDAV) search.

Impact & exploitability

AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products we track (1)

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Official patch: http://www.securityfocus.com/bid/1756 ↗

Additional information

• NVD record
• http://www.securityfocus.com/bid/1756Patch
• http://www.atstake.com/research/advisories/2000/a100400-1.txt
• http://www.microsoft.com/technet/support/kb.asp?ID=272079
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5335