MS IIS FrontPage 98 Extensions Filename Obfuscation Vulnerability

Bugtraq ID: 1108
Class: Design Error
CVE:
Remote: Yes
Local: Yes
Published: Apr 14 2000 12:00AM
Updated: Apr 14 2000 12:00AM
Credit: Discovered by Alf Serer <alf@at.clientlogic.com> and rain forest puppy <rfp@wiretrip.net>. Posted to Bugtraq on April 14, 2000.
Vulnerable: Microsoft InterDev 1.0
- Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0
Microsoft FrontPage 98 Server Extensions for IIS
+ Microsoft FrontPage 98
- Microsoft IIS 4.0
+ Microsoft NT Option Pack for NT 4.0 0
Not Vulnerable: Microsoft FrontPage 2000
- Microsoft Windows 2000 Professional
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows NT 4.0


 

Privacy Statement
Copyright 2010, SecurityFocus