Description

Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program, aka the "Undelimited .HTR Request" vulnerability.

Remediation

References

CVE-2000-0304

Related Vulnerabilities

GibbonEdu Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-34599)

WordPress 4.5.x Same Origin Method Execution (SOME) Vulnerability (4.5 - 4.5.1)

Jboss EAP Incorrect Authorization Vulnerability (CVE-2014-0169)

Dot CMS Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-11466)

silverstripeCMS Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-12437)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2000-0304