Detailed analysis of security vulnerabilities
IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files.