CVE-2000-0071 medium

Description

IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions.

Indicators of Compromise (0)

No indicators of compromise on this threat.

References (3)

• cve@mitre.org NVD Recent CVEs
• cve@mitre.org NVD Recent CVEs
• NVD detail: CVE-2000-0071 NVD Recent CVEs

  IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions.

• GitHub - fabianosrc/TermsrvPatcher: Patch termsrv.dll so that multiple ...
  web:github.com

  Patch termsrv.dll so that multiple remote users can open an RDP session on a non-Windows Server computer - fabianosrc/TermsrvPatcher

  2026-05-22 20:43 UTC
• Six Patch Management Best Practices [Updated 2026]
  web:heimdalsecurity.com

  Explore six essential patch management best practices for 2026 to keep your systems secure, up to date, and protected from vulnerabilities.

  2026-05-22 20:43 UTC
• How to Use Known Issue Rollback to Fix Problems Caused by Windows ...
  web:petri.com

  If a Group Policy setting is available to roll back a fix , it is included in the Windows Update KB article and release notes as a mitigation for a known issue.

  2026-05-22 20:43 UTC
• Security Update Guide - Microsoft
  web:portal.msrc.microsoft.com

  The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

  2026-05-22 20:43 UTC
• Vulnerability Patching: Why It's Critical & How to Do It Right
  web:tuxcare.com

  It includes discovering vulnerabilities, evaluating their potential impact, prioritizing remediation efforts (including patching), and confirming the fixes. Patch Management Patch management, on the other hand, is the act of applying the necessary updates to fix known vulnerabilities. It's a critical component of vulnerability management.

  2026-05-22 20:43 UTC
• Free Patch Management Solution | Action1
  web:www.action1.com

  Patch , manage and access up to 200 endpoints remotely FREE of any charges, forever, with a free patch management solution from Action1. No strings attached.

  2026-05-22 20:43 UTC
• Patch Management - Bitdefender
  web:www.bitdefender.com

  The GravityZone Patch Management module includes several features, such as on-demand or scheduled patch scanning, automatic or manual patching, and reporting on missing patches. Learn more about Bitdefender Patch Management supported vendors and products.

  2026-05-22 20:43 UTC
• CVE: Common Vulnerabilities and Exposures
  web:www.cve.org

  At cve .org, we provide the authoritative reference method for publicly known information-security vulnerabilities and exposures

  2026-05-22 20:43 UTC
• National Vulnerability Database | NIST
  web:www.nist.gov

  NIST maintains the National Vulnerability Database (NVD), a repository of information on software and hardware flaws that can compromise computer security. This is a key piece of the nation's cybersecurity infrastructure.

  2026-05-22 20:43 UTC
• Windows 11 February 2026 Patch: KB5077181 and KB5075941 fix zero-days ...
  web:www.notebookcheck.net

  Microsoft's February 2026 Windows 11 updates (KB5077181 and KB5075941) add security patches, bug fixes, and new Secure Boot rollout signals ahead of certificate expirations starting in June 2026.

  2026-05-22 20:43 UTC

Only Available for Registered Users. Sign in to view.