CVE-2000-0413 The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTML files by requesting a file that does no...
MediumCVSS 5.0
EPSS 43.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTML files by requesting a file that does not exist, which generates an error message that reveals the path.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft frontpage | All versions | No fix listed |
| Microsoft internet information server | = 4.0 | No fix listed |
| Microsoft internet information services | = 5.0 | No fix listed |
References
- 20000506 shtml.exe reveal local path of IIS web directory mailing-list
- 1174 vdb-entry