| Package | Affected versions | Patched versions |
|---|---|---|
| internet information server | = 4.0 | |
| internet information services | = 5.0 |
IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, which could allow remote attackers to bypass access restrictions to some files, aka the "File Permission Canonicalization" vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free