Microsoft FrontPage Unpassworded Installation

The remote web server appears to have FrontPage Extensions installed with incorrectly set permissions. A remote attacker could exploit this to modify web pages on the server. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11455; scriptversion "$Revision: 1.21 $";...

MS02-053: Microsoft FrontPage Extensions shtml.exe Remote Overflow (uncredentialed check)

The remote host has FrontPage Server Extensions FPSE installed. There is a denial of service / buffer overflow condition in the program 'shtml.exe' which comes with it. However, no public detail has been given regarding this issue yet, so it's not possible to remotely determine if you are...

CVE-2002-1718

Microsoft Internet Information Server IIS 5.1 may allow remote attackers to view the contents of a Frontpage Server Extension FPSE file, as claimed using an HTTP request for colegal.htm that contains .. dot dot sequences...

CVE-2002-0692

Buffer overflow in SmartHTML Interpreter shtml.dll in Microsoft FrontPage Server Extensions FPSE 2000 and 2002 allows remote attackers to cause a denial of service CPU consumption or run arbitrary code, respectively, via a certain type of web file request...

Microsoft SmartHTML interpreter (shtml.dll) contains vulnerability

Overview Microsoft's SmartHTML interpreter shtml.dll contains a remotely exploitable vulnerability. Description shtml.dll is a component of FrontPage Server Extensions. FrontPage Server Extensions allow web developers to add or change content and to manage the web server.Quoting from MS02-053, "T...

Buffer overflow in Microsoft FrontPage SmartHTML

Buffer overflow in shtml.dll...

Microsoft Security Bulletin MS02-053: Buffer Overrun in SmartHTML Interpreter Could Allow Code Execution (Q324096)

---------------------------------------------------------------------- Title: Buffer Overrun in SmartHTML Interpreter Could Allow Code Execution Q324096 Released: 25 September 2002 Software: FrontPage Server Extensions 2000 and 2002 Impact: Denial of service or privilege elevation Max Risk:...

CVE-2002-0427

Buffer overflows in fpexec in modfrontpage before 1.6.1 may allow attackers to gain root privileges...

Microsoft Internet Information Server (IIS) vulnerable to DoS when URL request exceeds maximum allowed length

Overview Intruders may be able to cause the IIS service to fail by sending a particular kind of overly-long URL. Description ISAPI is a programming interface to IIS that can be used to modify or extend the behavior of IIS. Programs written using ISAPI are known as either filters or extension,...

CVE-2001-1204: Undefined Security Weakness

Directory traversal vulnerability in phprocketaddin in Total PC Solutions PHP Rocket Add-in for FrontPage 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the page parameter...

Переполнение буфера в mod_frontpage (buffer overflow)

Переполнение буфера в fpexec.c...

PHP Rocket for FrontPage phprocketaddin page Parameter Traversal Arbitrary File Access

There is a vulnerability in the PHP Rocket Add-in for FrontPage that allows a remote attacker to view the contents of any arbitrary file to which the web user has access. This vulnerability exists because the PHP Rocket Add-in does not filter out ../ and is, therefore, susceptible to this directo...

CVE-2001-0341: Undefined Security Weakness

Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a long registration request URL to fp30reg.dll...

CVE-1999-1376

CVE-1999-1376 targets IIS 4.0 with FrontPage Server Extensions, via the fpcount.exe CGI. The vulnerability is a remote buffer overflow in the fpcount.exe CGI that could allow a remote attacker to execute arbitrary commands on the server, potentially crashing it or taking control. Incident details...

CVE-1999-1016

Microsoft HTML control as used in 1 Internet Explorer 5.0, 2 FrontPage Express, 3 Outlook Express 5, and 4 Eudora, and possibly others, allows remote malicious web site or HTML emails to cause a denial of service 100% CPU consumption via large HTML form fields such as text inputs in a table cell...

CVE-1999-1052

Microsoft FrontPage stores form results in a default location under /_private/form_results.txt, which is world-readable and accessible from the document root. This allows remote attackers to read possibly sensitive information submitted by other users. The available connected records confirm the ...

CVE-1999-1052

Microsoft FrontPage stores form results in a default location in /private/formresults.txt, which is world-readable and accessible in the document root, which allows remote attackers to read possibly sensitive information submitted by other users...

CVE-1999-1376

Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands...

CVE-1999-1376: Undefined Security Weakness

Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands...

CVE-1999-1052: Undefined Security Weakness

Microsoft FrontPage stores form results in a default location in /private/formresults.txt, which is world-readable and accessible in the document root, which allows remote attackers to read possibly sensitive information submitted by other users...