Published: 17/07/2000 Updated: 30/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Subscribe to Internet Information Services

IIS 4.0 and 5.0 allows remote malicious users to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft internet information services 5.0
microsoft internet information server 4.0

source: wwwsecurityfocuscom/bid/1488/info Microsoft IIS 40 and 50 can be made to disclose fragments of source code which should otherwise be inaccessible This is done by appending "+htr" to a request for a known asp (or asa, ini, etc) file Appending this string causes the request to be handled by ISMDLL, which then strips the +h ...

NVD-CWE-Other http://www.securityfocus.com/bid/1488 https://exchange.xforce.ibmcloud.com/vulnerabilities/5104 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-044 https://nvd.nist.gov https://www.exploit-db.com/exploits/20089/https://www.kb.cert.org/vuls/id/28565

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2000-0630

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect