CVE:CVE-2000-0071
CNNVD:CNNVD-200001-032
IIS 4.0版本存在漏洞。远程攻击者可以通过.ida和.idq扩展要求不存在的文件获得文件根目录的真实路径名。
solution:Upgrade microsoft internet_information_server to a higher version than 3.0,4.0,and avoid the version 3.0,4.0; Upgrade microsoft internet_information_services to a higher version than 5.0,and avoid the version 5.0