CVE-2000-0631: Medium severity Microsoft Internet Information Server vulnerability

Published Jul 14, 2000

Updated

An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing the script without a particular argument, aka the "Absent Directory Browser Argument" vulnerability.

Affected Software

3 affected components

Microsoft Internet Information Server=3.0

Microsoft Internet Information Server=4.0

Microsoft Internet Information Services=5.0

Remediation

Patch Available

http://www.securityfocus.com/bid/1476

Event History

Jul 14, 2000

CVE Published

04:00 AM

Oct 13, 2000

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-0631?

CVE-2000-0631 has a high severity due to its potential to cause denial of service to affected IIS servers.

How do I fix CVE-2000-0631?

To fix CVE-2000-0631, it is recommended to upgrade to a newer, patched version of Internet Information Services.

Which versions of IIS are affected by CVE-2000-0631?

CVE-2000-0631 affects Microsoft Internet Information Services versions 3.0, 4.0, and 5.0.

What type of attack does CVE-2000-0631 facilitate?

CVE-2000-0631 facilitates denial of service attacks by allowing remote access to a vulnerable administrative script.

Is there a workaround for CVE-2000-0631?

A possible workaround for CVE-2000-0631 includes disabling the vulnerable script or limiting access to it.