CVSS: 7.5EPSS: 12%CPEs: 2EXPL: 0CVE-2001-0146
https://notcve.org/view.php?id=CVE-2001-0146
09 Mar 2001 — IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service (memory allocation error) by repeatedly sending a series of specially formatted URL's. • http://www.kb.cert.org/vuls/id/796584 •
CVSS: 7.5EPSS: 76%CPEs: 2EXPL: 0CVE-2001-0004
https://notcve.org/view.php?id=CVE-2001-0004
12 Feb 2001 — IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.htr" to the requested URL, which causes the files to be parsed by the .HTR ISAPI extension, aka a variant of the "File Fragment Reading via .HTR" vulnerability. • http://marc.info/?l=bugtraq&m=97897954625305&w=2 •
CVSS: 7.5EPSS: 55%CPEs: 2EXPL: 0CVE-2001-0096
https://notcve.org/view.php?id=CVE-2001-0096
12 Feb 2001 — FrontPage Server Extensions (FPSE) in IIS 4.0 and 5.0 allows remote attackers to cause a denial of service via a malformed form, aka the "Malformed Web Form Submission" vulnerability. • https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-100 •
CVSS: 7.5EPSS: 12%CPEs: 2EXPL: 0CVE-2000-1090
https://notcve.org/view.php?id=CVE-2000-1090
02 Feb 2001 — Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malformed URL that uses the lead-byte of a double-byte character. • http://www.nsfocus.com/english/homepage/sa_08.htm •
CVSS: 9.8EPSS: 90%CPEs: 2EXPL: 9CVE-2000-0884 – Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal
https://notcve.org/view.php?id=CVE-2000-0884
19 Dec 2000 — IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability. • https://www.exploit-db.com/exploits/20298 •
CVSS: 9.8EPSS: 90%CPEs: 2EXPL: 1CVE-2000-0886 – Microsoft IIS 4.0/5.0 - Executable File Parsing
https://notcve.org/view.php?id=CVE-2000-0886
19 Dec 2000 — IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the "Web Server File Request Parsing" vulnerability. • https://www.exploit-db.com/exploits/20384 •
CVSS: 9.1EPSS: 41%CPEs: 2EXPL: 0CVE-2000-0970
https://notcve.org/view.php?id=CVE-2000-0970
19 Dec 2000 — IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remote attackers to hijack the secure web session of the user if that user moves to an insecure session, aka the "Session ID Cookie Marking" vulnerability. • http://www.acrossecurity.com/aspr/ASPR-2000-07-22-1-PUB.txt •
CVSS: 7.5EPSS: 9%CPEs: 2EXPL: 0CVE-2000-1104
https://notcve.org/view.php?id=CVE-2000-1104
19 Dec 2000 — Variant of the "IIS Cross-Site Scripting" vulnerability as originally discussed in MS:MS00-060 (CVE-2000-0746) allows a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client. The client then executes those scripts in the same context as the trusted site. • https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-060 •
CVSS: 9.8EPSS: 3%CPEs: 1EXPL: 3CVE-2000-1147 – Microsoft IIS 4.0 - ISAPI Buffer Overflow
https://notcve.org/view.php?id=CVE-2000-1147
19 Dec 2000 — Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to the "LANGUAGE" argument in a script tag. • https://www.exploit-db.com/exploits/20383 •
CVSS: 7.5EPSS: 20%CPEs: 2EXPL: 0CVE-2000-0858
https://notcve.org/view.php?id=CVE-2000-0858
14 Nov 2000 — Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a series of malformed requests which cause INETINFO.EXE to fail, aka the "Invalid URL" vulnerability. • http://archives.neohapsis.com/archives/vendor/2000-q3/0065.html •