Lucene search

MitreCVE-2000-0710

HistoryOct 20, 2000 - 4:00 a.m.

CVE-2000-0710

2000-10-2004:00:00

mitre

web.nvd.nist.gov

microsoft

frontpage

2000

server

security issue

dos device

url

shtml.exe

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.965

Percentile

99.6%

JSON

The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name.

Affected configurations

Nvd

Node

microsoftfrontpage

VendorProductVersionCPE
microsoftfrontpage*cpe:2.3:a:microsoft:frontpage:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	frontpage	*	cpe:2.3:a:microsoft:frontpage::::::::

References

archives.neohapsis.com/archives/bugtraq/2000-08/0288.html

msdn.microsoft.com/workshop/languages/fp/2000/sr12.asp

www.securityfocus.com/bid/1608

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.965

Percentile

99.6%

JSON

Related for CVE-2000-0710