Description

IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, aka the "Specialized Header" vulnerability.

Remediation

References

CVE-2000-0778

Related Vulnerabilities

WordPress Improper Restriction of XML External Entity Reference Vulnerability (CVE-2021-29447)

WordPress Plugin Snazzy Archives Cross-Site Scripting (1.7.1)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2355)

RubyGems Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2018-1000073)

Oracle Application Server Other Vulnerability (CVE-2004-1877)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2000-0778