CNCVE编号：CNCVE-20000886 CVE编号：CVE-2000-0886 安全级别：中 漏洞中文描述： IIS5.0中存在一个漏洞，该漏洞导致远程攻击者可以通过一些特定形式的用于可执行文件的请求来执行任意的代码，这些文件名字附加在操作系统命令上。 漏洞英文描述： IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the "Web Server File Request Parsing" vulnerability. 漏洞参考： BUGTRAQ:20001107 NSFOCUS SA2000-07 : Microsoft IIS 4.0/5.0 CGI File Name Inspection Vulnerability | URL:http://www.securityfocus.com/templates/archive.pike?mid=143604&list=1&fromthread=0&end=2000-11-11&threads=0&start=2000-11-05& | MS:MS00-086 | 系统类型： Win2000/NT 漏洞类型：输入有效性检查错误