CVE-1999-0154

Description

IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL.

Affected products

• microsoft / internet_information_server3.0 – 3.0
• microsoft / internet_information_services2.0 – 2.0

Exploits & proofs of concept

• exploit-dbMicrosoft IIS 2.0/3.0 - Appended Dot Script Source Disclosureby Mark Joseph Edwards

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0154