CVE-2000-0114
https://notcve.org/view.php?id=CVE-2000-0114
Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtual directory. • https://github.com/Cappricio-Securities/CVE-2000-0114 https://github.com/0xMe5war/CVE-2000-0114 https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0114 •
CVE-2000-0126 – Microsoft IIS 3.0/4.0 / Microsoft Index Server 2.0 - Directory Traversal (MS00-006)
https://notcve.org/view.php?id=CVE-2000-0126
Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack. • https://www.exploit-db.com/exploits/19742 https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0126 •
CVE-2000-0071
https://notcve.org/view.php?id=CVE-2000-0071
IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions. • http://marc.info/?l=bugtraq&m=94770020309953&w=2 http://marc.info/?l=bugtraq&m=94780058006791&w=2 •
CVE-1999-1233
https://notcve.org/view.php?id=CVE-1999-1233
IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain, aka the "Domain Resolution" vulnerability. • http://support.microsoft.com/support/kb/articles/Q241/5/62.asp http://www.securityfocus.com/bid/657 https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-039 https://exchange.xforce.ibmcloud.com/vulnerabilities/3306 •
CVE-1999-1148
https://notcve.org/view.php?id=CVE-1999-1148
FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via many passive (PASV) connections at the same time. • http://support.microsoft.com/support/kb/articles/Q189/2/62.ASP https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-006 https://exchange.xforce.ibmcloud.com/vulnerabilities/1215 •