{"id":"CVE-2001-0333","aliases":[],"url":"https://o3.security/vulnerability/CVE-2001-0333","summary":"Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and \"\\\" characters twice.","details":"Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and \"\\\" characters twice.","published":"2001-06-27T04:00:00.000","modified":"2026-06-16T21:54:07.060","cvss":null,"epss":{"score":0.9077,"percentile":0.99798,"asOf":"2026-09-10"},"cisaKev":null,"exploitsKnown":10,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"http://marc.info/?l=bugtraq&m=98992056521300&w=2"},{"type":"WEB","url":"http://www.cert.org/advisories/CA-2001-12.html"},{"type":"WEB","url":"http://www.securityfocus.com/bid/2708"},{"type":"WEB","url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-026"},{"type":"WEB","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6534"},{"type":"WEB","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1018"},{"type":"WEB","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1051"},{"type":"WEB","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A37"},{"type":"WEB","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A78"},{"type":"WEB","url":"http://marc.info/?l=bugtraq&m=98992056521300&w=2"},{"type":"WEB","url":"http://www.cert.org/advisories/CA-2001-12.html"},{"type":"WEB","url":"http://www.securityfocus.com/bid/2708"},{"type":"WEB","url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-026"},{"type":"WEB","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6534"},{"type":"WEB","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1018"},{"type":"WEB","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1051"},{"type":"WEB","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A37"},{"type":"WEB","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A78"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-06-16T21:54:07.060"}}