⬇ Download holy card: ·
Saint IIS Unicode Traversal
Hagiography in preparation at the scriptorium.
Feast day October 17
Technical record
- Disclosed on
- October 17 2000
- CVE
- CVE-2000-0884
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.
Sources: cve.org · learn.microsoft.com · kb.cert.org
Elected Pope Unicode I in 2000
Related scourges: The Scourge of Nimda, Admin Backwards