Description

IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, which could allow remote attackers to bypass access restrictions to some files, aka the "File Permission Canonicalization" vulnerability.

Remediation

References

CVE-2000-0770

Related Vulnerabilities

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Unspecified Vulnerability (2.1.3)

Oracle HTTP Server CVE-2016-0671 Vulnerability (CVE-2016-0671)

MediaWiki Improper Input Validation Vulnerability (CVE-2011-1579)

Atlassian Confluence Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2021-26084)

WordPress Plugin Statistics Remote Code Execution (1.8)

Severity

Medium

Classification

CVE-2000-0770

Tags

Missing Update Known Vulnerabilities