CVE-2000-0126

披露于 2000/01/26 · 更新于 2025/07/12

CVSS 评分5.0/ 10.0

EPSS 概率70.1%百分位 98.6%

漏洞描述

Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

RELATED INTELLIGENCE

与 internet_information_server 相关的其他公开漏洞。

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2017-7269 Windows Server 2003 & IIS 6.0 - Remote Code Execution internet_information_server	严重	9.8	94.4%	PoCEXP	2017/03/27
CVE-2010-1899RCE CVE-2010-1899 IIS internet_information_server	中危	4.3	87.0%	PoCEXP	2010/09/15
CVE-2008-0075RCE CVE-2008-0075 internet_information_server	严重	10.0	72.5%	PoCEXP	2008/02/12
CVE-2006-0026RCE CVE-2006-0026 internet_information_server	中危	6.5	90.1%	PoCEXP	2006/07/11
CVE-2003-0718RCE CVE-2003-0718 IIS internet_information_server	中危	5.0	82.0%	PoCEXP	2004/11/03
CVE-2002-0148 CVE-2002-0148 IIS internet_information_server	高危	7.5	72.5%	PoCEXP	2002/04/22