Description

ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large number of encoded spaces (%20) and terminated with a .htr extension, aka the ".HTR File Fragment Reading" or "File Fragment Reading via .HTR" vulnerability.

Remediation

References

CVE-2000-0457

Related Vulnerabilities

WordPress Plugin Visual Form Builder Cross-Site Scripting (3.0.3)

WordPress Plugin Autoptimize Cross-Site Scripting (2.8.3)

LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-25799)

Drupal Other Vulnerability (CVE-2006-1225)

WebLogic CVE-2018-2902 Vulnerability (CVE-2018-2902)

Severity

High

Classification

CVE-2000-0457

Tags

Missing Update Known Vulnerabilities