CVE

Id
2825  
CVE No.
CVE-2001-0004  
Status
Entry  
Description
IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.htr" to the requested URL, which causes the files to be parsed by the .HTR ISAPI extension, aka a variant of the "File Fragment Reading via .HTR" vulnerability.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
11349 2825 CVE-2001-0004 BUGTRAQ:20010108 IIS 5.0 allows viewing files using %3F+.htr  View
11350 2825 CVE-2001-0004 URL:http://marc.info/?l=bugtraq&m=97897954625305&w=2  View
11351 2825 CVE-2001-0004 MS:MS01-004  View
11352 2825 CVE-2001-0004 URL:http://www.microsoft.com/technet/security/bulletin/MS01-004.asp  View
11353 2825 CVE-2001-0004 BID:2313  View
11354 2825 CVE-2001-0004 URL:http://www.securityfocus.com/bid/2313  View
11355 2825 CVE-2001-0004 XF:iis-read-files(5903)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64037 JVNDB-2001-000011 Microsoft IIS におけるファイル開示の脆弱性 Microsoft IIS には、特定の URL を含むリクエストを受信した場合、特定のファイルの一部を読み出されてしまう脆弱性が存在します。 CVE-2001-0004 2825 5 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000011.html  View