windows2k.iss

I found there is a security problem about shtml.exe that allows anyone to explore the local path of IIS web server. Tested on windows2000 server.shtml.exe is a program issued with Forntpage Extention server for viewing smart HTML file, If we install Frontpage on Windows2000 server, a directory...

Очередной способ получить путь к файлам через FrontPage Server

Запросив у shtml.exe из каталога vtibin несуществующий файл можно получить путь к этому файлу...

shtml.exe reveal local path of IIS web directory

I found there is a security problem about shtml.exe that allows anyone to explore the local path of IIS web server. Tested on windows2000 server.shtml.exe is a program issued with Forntpage Extention server for viewing smart HTML file, If we install Frontpage on Windows2000 server, a directory...

Microsoft IIS FrontPage Server Extensions (FPSE) shtml.exe Path Disclosure

The version of FrontPage Extensions running on the remote host has an information disclosure vulnerability. Using a non-existent file as an argument to the 'shtml.exe' CGI reveals the local absolute path of the web root. A remote attacker could use this information to mount further attacks. C...

CVE-2000-0413

The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTML files by requesting a file that does not exist, which generates an error message that reveals the path...

FrontPage 2000 IIS 4.05.0 - Server Extensions Full Path Disclosure

FrontPage 2000 IIS 4.05.0 - Server Extensions Full Path Disclosure source: https://www.securityfocus.com/bid/1174/info The local path of a HTML, HTM, ASP, or SHTML file can be disclosed in Microsoft IIS 4.0/5.0 / Frontpage Server Extensions 1.1 and prior. Passing a path to a non-existent file to...

FrontPage 2000 / IIS 4.0/5.0 - Server Extensions Full Path Disclosure

source: https://www.securityfocus.com/bid/1174/info The local path of a HTML, HTM, ASP, or SHTML file can be disclosed in Microsoft IIS 4.0/5.0 / Frontpage Server Extensions 1.1 and prior. Passing a path to a non-existent file to the shtml.exe or shtml.dll depending on platform program will displ...

CVE-2000-0256

The CVE-2000-0256 entry describes buffer overflows in FrontPage 97/98 Server Extensions, specifically htimage.exe (and Imagemap.exe) that allow a remote attacker to perform actions beyond the web site’s scope. A concrete exploit path is documented for htimage.exe via /cgi-bin/htimage.exe/AAAA[......

CVE-2000-0256

Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not otherwise available through the web site, aka the "Server-Side Image Map Components" vulnerability...

Microsoft Security Bulletin (MS00-028)

Microsoft Security Bulletin MS00-028 - -------------------------------------- Procedure Available to Eliminate "Server-Side Image Map Components" Vulnerability Originally Posted: April 21, 2000 Summary ======= A procedure is available to eliminate a security vulnerability affecting several web...

CVE-2000-0256

Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not otherwise available through the web site, aka the "Server-Side Image Map Components" vulnerability...

More vulnerabilities in FP

------- Legion2000 - Russian Security Team ADV-1504001 ------- www.legion2000.cc ---- INFORMATION ---- Program Name : CERN Image Map Dispatcher Discovered By : Narrow [email protected] --------------------- Problem Description CERN Image Map Dispatcher /cgi-bin/htimage.exe comes by default with...

FrontPage 9798 - Server Image Mapper Buffer Overflow

FrontPage 9798 - Server Image Mapper Buffer Overflow source: https://www.securityfocus.com/bid/1117/info The htimage.exe and imagemap.exe files included with FrontPage handle server-side image mapping functions. Under normal operations, it would be passed a map name and a set of coordinates in th...

Microsoft FrontPage htimage.exe CGI Remote Overflow

The htimage.exe CGI is installed on the remote web server. This CGI is vulnerable to a remote buffer overflow attack when it is given the request : /cgi-bin/htimage.exe/AAAA....AAA?0,0 A remote attacker could use this to crash the web server, or possibly execute arbitrary code. %NASLMINLEVEL 7030...

RFP2K02: "Netscape engineers are weenies!"

----- UMBRA Advisory RFP2K02 -------------------------- rfp.labs --------- "Netscape engineers are weenies!" A back door in Microsoft FrontPage extensions/authoring components ------------------------------------- Alf Serer / [email protected] - rain forest puppy / [email protected] Table of...

Microsoft FrontPage 98 Server Extensions for IIS Microsoft InterDev 1.0 - Remote Buffer Overflow

Microsoft FrontPage 98 Server Extensions for IIS Microsoft InterDev 1.0 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/1109/info The dvwssr.dll included with the FrontPage 98 extensions for IIS and shipped as part of the NT Option Pack has a remotely exploitable buffer overflo...

MS IIS FrontPage 98 Extensions Buffer Overflow Vulnerability

Advisory ID Internal CORE-041200 1. Advisory Information Date Published: 2000-04-14 Last Update: 2000-04-14 Advisory ID: CORE-041200 Bugtraq ID: 1109 CVE Name: CVE-2000-0260 Title: MS IIS FrontPage 98 Extensions Buffer Overflow Vulnerability Class: Boundary Error Condition Buffer Overflow Remotel...

Microsoft FrontPage 98 Server Extensions for IIS Microsoft InterDev 1.0 - Filename Obfuscation

Microsoft FrontPage 98 Server Extensions for IIS Microsoft InterDev 1.0 - Filename Obfuscation source: https://www.securityfocus.com/bid/1108/info Two dlls dvwssr.dll and mtd2lv.dll included with the FrontPage 98 extensions for IIS and shipped as part of the NT Option Pack include an obfuscation...

RFP2K02.txt

----- UMBRA Advisory RFP2K02 -------------------------- rfp.labs --------- "Netscape engineers are weenies!" A back door in Microsoft FrontPage extensions/authoring components ------------------------------------- Alf Serer / [email protected] - rain forest puppy / [email protected] Table of...

Microsoft FrontPage dvwssr.dll Multiple Vulnerabilities

The version of Microsoft FrontPage running on the remote host has the following vulnerabilities in '/vtibin/vtiaut/dvwssr.dll' : - A security bypass vulnerability that allows anyone with web authoring permissions to alter other users' files. - A remote buffer overflow vulnerability that could all...