CVE-2000-0886: Microsoft Internet Information Server

High severity, CVSS 7.5. EPSS: 68.7% chance of exploitation in the next 30 days.

IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the "Web Server File Request Parsing" vulnerability.

Affected products

• Microsoft Internet Information Server: version 4.0 only
• Microsoft Internet Information Services: version 5.0 only

Published 2000-12-19. Last modified 2026-09-23.