CVE-2001-0507 IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka the "System file listing privilege elevation" vulner...
HighCVSS 7.2
EPSS 8.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka the "System file listing privilege elevation" vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet information services | = 5.0 | No fix listed |
References
- 20010816 ENTERCEPT SECURITY ALERT: Privilege Escalation Vulnerability in Microsoft IIS mailing-list
- L-132 government-resource third-party-advisory
- 5607 vdb-entry
- MS01-044 vendor-advisory
- iis-relative-path-privilege-elevation(6985) vdb-entry
- oval:org.mitre.oval:def:909 signature vdb-entry
- oval:org.mitre.oval:def:912 signature vdb-entry