published June 2, 2000
NVD has not assigned a CVSS score to this record. It sits in the 99.6th percentile for exploit probability.
IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.