Description

IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, aka the "Specialized Header" vulnerability.

Remediation

References

CVE-2000-0778

Related Vulnerabilities

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6633)

WordPress Plugin Zoho SalesIQ Multiple Vulnerabilities (1.0.8)

Nginx Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2009-3898)

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-8756)

WordPress Plugin XO Security Cross-Site Scripting (1.5.2)

Severity

Medium

Classification

CVE-2000-0778

Tags

Missing Update Known Vulnerabilities