CVE-1999-0736

The writeup describes a directory traversal vulnerability in Microsoft IIS 4.0's default ASP scripts (showcode.asp, CodeBrws.asp), allowing remote attackers to read arbitrary files on the same volume as the web server by manipulating the 'source' parameter with '../' sequences. No functional exploit code is provided, but technical details and example URLs are included.