CVE-2000-0884
EXPLOITEDInternet Information Server 4.0-5.0 - Path Traversal and Remote Code Execution via Unicode-Encoded URL
Title source: llmExploitation Summary
CVE-2000-0884 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 9 public exploits from researchers including Optyx, Roelof Temmingh, steeLe.
AI-analyzed exploit summary This exploit targets a directory traversal vulnerability in Microsoft IIS 4.0/5.0 via Unicode encoding manipulation. It allows remote command execution by traversing directories to access cmd.exe and execute arbitrary commands.
Description
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.
Exploits (9)
This exploit targets a directory traversal vulnerability in Microsoft IIS 4.0/5.0 via Unicode encoding manipulation. It allows remote command execution by traversing directories to access cmd.exe and execute arbitrary commands.
This Perl script exploits the IIS Unicode vulnerability (CVE-2000-0884) to achieve remote command execution by leveraging directory traversal via Unicode-encoded characters. It first checks for the presence of a copied cmd.exe (sensepost.exe) and copies it if missing, then executes arbitrary commands.
This Perl script exploits a Unicode directory traversal vulnerability in IIS 4.0/5.0 (CVE-2000-0884) by sending crafted HTTP requests to execute arbitrary commands (e.g., `cmd.exe /c dir`). It checks multiple Unicode-encoded traversal sequences and logs vulnerable hosts.
This exploit targets a directory traversal vulnerability in IIS 4/5 via a malformed URL to execute arbitrary commands through cmd.exe. It sends an HTTP GET request with encoded traversal sequences to achieve remote command execution.
This Perl script tests for the Unicode directory traversal vulnerability (CVE-2000-0884) in Microsoft IIS 4.0/5.0 and Personal Web Server by sending HTTP requests with encoded traversal sequences to check if arbitrary file access is possible.
This exploit leverages Unicode directory traversal vulnerabilities in Microsoft IIS 4.0/5.0 to execute arbitrary commands via `cmd.exe`. It includes multiple encoded paths to bypass security filters and achieve remote code execution.
This exploit leverages Unicode directory traversal in Microsoft IIS 4.0/5.0 to execute arbitrary commands via `cmd.exe`. It includes multiple attack vectors to bypass security checks and achieve remote code execution.
This exploit leverages a Unicode directory traversal vulnerability in Microsoft IIS 4.0/5.0 to execute arbitrary commands via cmd.exe. It sends crafted HTTP requests with encoded traversal sequences to bypass security checks and achieve remote code execution.
This exploit targets CVE-2000-0884, a directory traversal vulnerability in Microsoft IIS 4.0/5.0 and Personal Web Server via Unicode-encoded '../' sequences. It attempts to execute arbitrary commands by accessing 'cmd.exe' through various paths and Unicode obfuscation techniques.