CVE-2001-0333: Microsoft Internet Information Server

High severity, CVSS 7.5. EPSS: 90.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and "\" characters twice.

Affected products

• Microsoft Internet Information Server: up to and including 5.0; version 4.0 only

Published 2001-06-27. Last modified 2026-06-16.