| Package | Affected versions | Patched versions |
|---|---|---|
| commercial internet system | = 2.0= 2.5 | |
| internet information server | = 4.0 | |
| internet information services | = 5.0 | |
| proxy server | = 2.0 | |
| site server | = 3.0 | |
| site server commerce | = 3.0 |
IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free