CVE-1999-0012

Certain Microsoft Windows web servers are susceptible to a vulnerability where remote attackers can bypass access restrictions for files with long file names. The underlying cause is related to CWE-290 (Authentication Bypass by Spoofing) . No specific versions are identified as affected, and ther...

CVE-2000-0153

The CVE-2000-0153 entry concerns FrontPage Personal Web Server (PWS). It describes a path traversal vulnerability (dot-dot attack) that allows remote attackers to read files, resulting in partial confidentiality impact. The available connected records confirm the affected product and the basic im...

CVE-2000-0256

The CVE-2000-0256 entry describes buffer overflows in FrontPage 97/98 Server Extensions, specifically htimage.exe (and Imagemap.exe) that allow a remote attacker to perform actions beyond the web site’s scope. A concrete exploit path is documented for htimage.exe via /cgi-bin/htimage.exe/AAAA[......

CVE-1999-0386

CVE-1999-0386 affects Microsoft Personal Web Server and FrontPage Personal Web Server on Windows. Connected sources confirm a remote attacker can read server files via a nonstandard URL, with additional evidence describing a traversal-like vector using multiple dot characters (e.g., dot-dot-dot s...

CVE-1999-0681

CVE-1999-0681: A buffer overflow in Microsoft FrontPage Server Extensions (PWS) 3.0.2.926 on Windows 95 (and possibly other versions) allows remote attackers to cause a denial of service by sending a long URL. Red Hat and CVE records confirm the same description. The exposed component is FrontPag...