CVE-2000-0126: Microsoft Internet Information Server

Medium severity, CVSS 5.0. EPSS: 45.7% chance of exploitation in the next 30 days.

Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.

Affected products

• Microsoft Internet Information Server: version 3.0 only; version 4.0 only

Published 2000-01-26. Last modified 2026-06-16.