CVE-2000-0770

None

CVSS

—

EPSS

15.1%

Published

Oct 20, 2000

CISA due date

—

The record

IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, which could allow remote attackers to bypass access restrictions to some files, aka the "File Permission Canonicalization" vulnerability.

Affected packages

Ecosystem	Package	Introduced	Fixed