| Package | Affected versions | Patched versions |
|---|---|---|
| internet information server | = 4.0 | |
| site server | = 3.0 | |
| site server commerce | = 3.0 |
IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll, aka the "Virtual Directory Naming" vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free