CVE-2000-0631: Microsoft Internet Information Server

Medium severity, CVSS 5.0. EPSS: 24.7% chance of exploitation in the next 30 days.

An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing the script without a particular argument, aka the "Absent Directory Browser Argument" vulnerability.

Affected products

• Microsoft Internet Information Server: version 3.0 only; version 4.0 only
• Microsoft Internet Information Services: version 5.0 only

Published 2000-07-14. Last modified 2026-06-16.