CVE-2000-0246

Medium CVSS 5

Published 2000-03-30 · last changed 2026-06-16

The fix

We hold no Microsoft remediation data for CVE-2000-0246, which normally means it is not a Windows CVE. For non-Microsoft software the fix is the vendor's own updated release, and the affected versions are listed below.

What it is

IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.

Sources

NVD record for CVE-2000-0246

CVSS vector: AV:N/AC:L/Au:N/C:P/I:N/A:N