Skip to main content
UNPWNED
Scan free
CVE Radar
MediumIIS

CVE-2000-0951

A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web root via a Web Distributed Authoring and Versioning (WebDAV) search.

CVSS Base Score
5.0

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploit Probability
99%EPSS PERCENTILE0100

More exploitable than 99% of all CVEs · Top 1%

Is your site exposed to this?

Run a free scan. UNPWNED fingerprints your stack and flags this CVE class if the affected technology is detected.

Check my site
Details
Published
2000-12-19
Last modified
2026-09-23
Affected
IIS
References
NVD Detail OSV.dev GitHub Advisories

Related exploited CVEs in IIS

CVE-2000-0884
High · 7.5 CVSSIIS
CVE-2000-0886
High · 7.5 CVSSIIS
CVE-2000-0970
High · 7.5 CVSSIIS

Data from the National Vulnerability Database (NVD), CISA KEV, and FIRST.org EPSS. This product uses the NVD API but is not endorsed or certified by the NVD. EPSS is a probability estimate, not a guarantee of exploitation.