Description

ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large number of encoded spaces (%20) and terminated with a .htr extension, aka the ".HTR File Fragment Reading" or "File Fragment Reading via .HTR" vulnerability.

Remediation

References

CVE-2000-0457

Related Vulnerabilities

WordPress Plugin Translate WordPress-Google Language Translator Cross-Site Scripting (6.0.9)

TYPO3 Improper Input Validation Vulnerability (CVE-2011-4902)

Drupal Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Vulnerability (CVE-2019-11358)

Oracle JRE CVE-2023-21930 Vulnerability (CVE-2023-21930)

WordPress Plugin Social Media Share Buttons & Social Sharing Icons Security Bypass (1.5.1)

Severity

High

Tags

Missing Update Known Vulnerabilities CVE-2000-0457