Unscored severity · published Oct 20, 2000
CVE-2000-0710
The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid…
–
CVSS
26.4%
EPSS
No
On KEV
Description
The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name.
Exploitation
Is it being used?
Exploit prediction (EPSS)26.4% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
Frontpage · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2000-0710
CVE.org
https://www.cve.org/CVERecord?id=CVE-2000-0710
Patch
http://archives.neohapsis.com/archives/bugtraq/2000-08/0288.html
msdn.microsoft.com
http://msdn.microsoft.com/workshop/languages/fp/2000/sr12.asp
Patch
http://www.securityfocus.com/bid/1608
More from Frontpage
8.8
CVE-2007-0671
Microsoft Office Excel Remote Code Execution Vulnerability
7.0
CVE-1999-0012
Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names
–
CVE-2013-3137
Microsoft FrontPage 2003 SP3 does not properly parse DTDs, which allows remote attackers to obtain sensitive information via crafted XML data in a FrontPage document, aka "XML…
–
CVE-2008-3068
Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary…
–
CVE-2007-3109
The CERN Image Map Dispatcher (htimage.exe) in Microsoft FrontPage allows remote attackers to determine the existence, and possibly partial contents, of arbitrary files under the…