Remote Path Disclosure in Microsoft FrontPage Server Extensions 1.1

CVE-2000-0710

Summary

The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 contains a vulnerability that permits remote attackers to reveal the physical file path of the server components. This exposure occurs when an invalid URL is requested that incorporates a standard DOS device name, rendering the server's internal structure visible. By exploiting this weak point, attackers can obtain sensitive information that may aid in further attacks or exploitation of system resources.

References