CVE-2000-0884

CVE-2000-0884 is a critical directory traversal vulnerability affecting Microsoft IIS 4.0 and 5.0, allowing remote attackers to access files outside the web root and potentially execute arbitrary commands through malformed UNICODE URLs. With a CVSS score of 7.5 (High), it presents a significant risk due to its network-based attack vector and low attack complexity, enabling unauthorized information disclosure and potential system compromise. While not currently on CISA's KEV catalog, its high EPSS and FAUCET Risk Score, coupled with multiple public exploits available on ExploitDB, indicate a high likelihood of exploitation. Despite its age, the availability of exploit code suggests that systems still running vulnerable IIS versions remain at risk, though there is no recent community discussion or media coverage.