Description

IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability.

Remediation

References

CVE-2000-0630

Related Vulnerabilities

Ruby on Rails Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-0155)

Joomla Other Vulnerability (CVE-2005-3771)

LimeSurvey Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-9960)

WordPress Plugin Ceceppa Multilingua Unspecified Vulnerability (1.5.3)

Internet Information Services Other Vulnerability (CVE-2000-0246)

Severity

Medium

Classification

CVE-2000-0630

Tags

Missing Update Known Vulnerabilities