5.0med
CVE-2000-0710
The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the ser…
Published 26 y ago · modified 4 mo ago · JSON
CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
26.4%
percentile 98%
Public exploits
0
none known
Summary
The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name.
Exploit prediction (EPSS)
26.38% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
References
- msdn.microsoft.com /workshop/languages/fp/2000/sr12.asp · x_refsource_CONFIRM, x_transferred
- securityfocus.com /bid/1608 · vdb-entry, x_refsource_BID, x_transferred
- archives.neohapsis.com /archives/bugtraq/2000-08/0288.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
Sources
- CVE List: CVE-2000-0710
- NVD: CVE-2000-0710
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.