IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll, aka the "Virtual Directory Naming" vulnerability.
> AFFECTED_PRODUCTS
Microsoft - Internet Information Server
Version: 4.0
Microsoft - Site Server
Version: 3.0
Microsoft - Site Server Commerce
Version: 3.0
> HISTORIQUE DES MODIFICATIONS
Première apparition
21/12/1999 05:00
Source: NVD
📊
ENRICHISSEMENT
18/10/2025 13:59
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1
Dernière mise à jour: 1 year ago