National Vulnerability Database (CVE-2000-0886)

National Cyber-Alert System Vulnerability Summary: CVE-2000-0886
Orirignal release date: 2000-12-19 Source: US-CERT/NIST ### Overview IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the &quot;Web Server File Request Parsing&quot; vulnerability. ### Impact CVSS Severity: 7 (High) Range: local,remote Authentication: input Impact Type: sec_prot other="1" ### Reference to Advisories, Solutions, and Tools External Source: Security Focus Name: BID 1912 Hyperlink: http://www.securityfocus.com/vdb/bottom.html?vid=1912 External Source: Microsoft Name: MS:MS00-086 Hyperlink: http://www.microsoft.com/technet/security/bulletin/MS00-086.asp External Source: Security Focus Name: amp Hyperlink: http://www.securityfocus.com/templates/archive.pike?mid=143604& ### Vulnerable Software and Vendor IIS (Microsoft) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0886