CVE-2001-0506
7.2
CVSS v2.0 Base Score
77.61%
HIGH RiskEPSS (99th percentile)
NVD-CWE-Other
Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for a long filename, which triggers the overflow when the directory name is added, aka the "SSI privilege elevation" vulnerability.
Published: 9/20/2001
Modified: 4/16/2026
Vulnerability Summary
CVSS v2 Score
7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS Score (Exploitation Probability)
77.61%HIGH Exploitation Risk
99th percentile
This vulnerability has a 77.61% probability of being exploited in the next 30 days, ranking higher than 99% of all scored CVEs.
CWE Classification
NVD-CWE-Other