CVE-2000-0413

The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and…

published June 15, 2000

CVSS

—

EPSS

44%

Percentile

98.7

In the wild

Unconfirmed

What it is

The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTML files by requesting a file that does not exist, which generates an error message that reveals the path.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.43893 · 98.7th percentile
Published: 2000-06-15T04:00Z

EPSS history

Timeline

15 JUN 04:00Z
The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and…
cvelistv5