Description

ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large number of encoded spaces (%20) and terminated with a .htr extension, aka the ".HTR File Fragment Reading" or "File Fragment Reading via .HTR" vulnerability.

Remediation

References

CVE-2000-0457

Related Vulnerabilities

WordPress Plugin W4 Post List Cross-Site Scripting (2.4.4)

WordPress Plugin WP Ultimate Exporter Cross-Site Scripting (1.0)

Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-7851)

MySQL CVE-2024-20969 Vulnerability (CVE-2024-20969)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20357)

Severity

High

Classification

CVE-2000-0457

Tags

Missing Update Known Vulnerabilities