4 matches found
CVE-2000-0778
IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, aka the "Specialized Header" vulnerability...
CVE-2000-0778
CVE-2000-0778 affects Microsoft IIS (IIS 5.0/5.1). Vulnerability arises from an information-disclosure flaw where an HTTP Translate: f header allows remote attackers to obtain ASP/ASA source code. Affected products include Windows IIS; root cause is improper handling of the Translate header leadi...
Security Bulletin (MS00-058)
Microsoft Security Bulletin MS00-058 - -------------------------------------- Patch Available for "Specialized Header" Vulnerability Originally posted: August 14, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Internet Information Server that ships...
Microsoft IIS 5.0 - 'Translate: f' Source Disclosure (2)
source: https://www.securityfocus.com/bid/1578/info Microsoft IIS 5.0 has a dedicated scripting engine for advanced file types such as ASP, ASA, HTR, etc. files. The scripting engines handle requests for these file types, processes them accordingly, and then executes them on the server. It is...