Skip to content
skopnix
Dossier · Vulnerability

Vulnerability · NVD published 2001-09-20

CVE-2001-0507

IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka the "System file listing privilege elevation" vulnerability.

  1. First PoC
  2. 9194 days →First cited attacker

Signals

Exploited in the wild
Not on KEVNot in CISA's catalogue as of the last daily pull. Absence is not proof of safety.
EPSS · 30-day forecast
9%Chance of exploitation in the next 30 days, 95th percentile of all CVEs. A forecast; KEV outranks it.
CVSS · NVD
7.2AV:L/AC:L/Au:N/C:C/I:C/A:C
Internet exposure
not stated by sourcesNo exposure census on this CVE's dispatches.

Exploits

1 known · links only

Exploit-DB1

  1. Microsoft IIS 5.0 - In-Process Table Privilege Escalation ↗

    created 2001-08-15

On the wire

0 dispatches

No dispatch on our wire has named this CVE yet.

Watch this one?

KEV additions reach Telegram and the KEV-only RSS as they land.

Follow on TelegramKEV RSSAPI

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.