CVE-1999-0253
Internet Information Server 3.0 - Unauthenticated Source Code Disclosure via URL-Encoded Dot Bypass
Title source: llmDescription
IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) in the URL.
References (1)
Core 1
Core References
Third Party Advisory, VDB Entry x_refsource_misc
http://www.securityfocus.com/bid/1814
Scores
EPSS
0.0795
EPSS Percentile
94.2%
Details
Status
published
Products (3)
microsoft/internet_information_server
3.0
microsoft/internet_information_services
1.0
microsoft/internet_information_services
2.0
Published
Jan 01, 1997
Tracked Since
Feb 18, 2026