## Description

In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### microsoft - internet_information_server

Affected Versions:

- 3.0

### microsoft - internet_information_server

Affected Versions:

- 4.0

### microsoft - internet_information_services

Affected Versions:

- 2.0

### microsoft - internet_information_services

Affected Versions:

- 5.0

## References

- http://www.securityfocus.com/bid/194
- http://www.securityfocus.com/bid/194

Neural Processor Active