CVE-2001-0335

Internet Information Server < 5.0 - Guest Account Enumeration via FTP Username Prefix

Title source: llm
STIX 2.1

Description

FTP service in IIS 5.0 and earlier allows remote attackers to enumerate Guest accounts in trusted domains by preceding the username with a special sequence of characters.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/6545
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/2719

Scores

EPSS 0.2096
EPSS Percentile 97.3%

Details

Status published
Products (1)
microsoft/internet_information_server < 5.0
Published Jun 27, 2001
Tracked Since Feb 18, 2026