exploits , vulnerabilities , articles , Microsoft IIS 4.0/5.0 File Permission Canonicalization Vulnerability

Title	Microsoft IIS 4.0/5.0 File Permission Canonicalization Vulnerability
Published	2000-08-10-12:00AM
Updated	2000-08-10-12:00AM
Class	Access Validation Error
CVE	CVE-2000-0770
Remote	Yes
Local	Yes
Credit	Discovered by Burt Abreu & S?ren Skov of VBExplorer.com.
Vulnerable	Microsoft IIS 5.0 Microsoft Windows 2000 Advanced Server Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Professional Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Server Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server SP2 Microsoft IIS 4.0 alpha Microsoft Windows NT 4.0 alpha Microsoft IIS 4.0 Cisco Building Broadband Service Manager 5.0 Cisco Call Manager 1.0 Cisco Call Manager 2.0 Cisco Call Manager 3.0 Cisco ICS 7750 Cisco IP/VC 3540 Video Rate Matching Module Cisco Unity Server 2.0 Cisco Unity Server 2.2 Cisco Unity Server 2.3 Cisco Unity Server 2.4 Cisco uOne 1.0 Cisco uOne 2.0 Cisco uOne 3.0 Cisco uOne 4.0 Microsoft BackOffice 4.0 Microsoft BackOffice 4.5 Microsoft Windows NT 4.0 Option Pack
Not Vulnerable
Code	Currently SecurityDot is not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: content@securitydot.net.
TXT