Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Internet Information Services Other Vulnerability - CVE-2001-0004 - Vulnerability Database
Internet Information Services

Internet Information Services Other Vulnerability - CVE-2001-0004

Medium
Reference: CVE-2001-0004
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2001-0004
Title: Internet Information Services Other Vulnerability
Overview:

IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending quot3F.htrquot to the requested URL which causes the files to be parsed by the .HTR ISAPI extension aka a variant of the quotFile Fragment Reading via .HTRquot vulnerability.