PT-2000-1642 · Microsoft · Frontpage 2000 Server Extensions

Published 2000-10-20 · Updated 2008-09-05 · CVE-2000-0709

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft FrontPage 2000 Server Extensions version 1.1

Description The issue allows remote attackers to cause a denial of service in some components by requesting a URL whose name includes a standard DOS device name.

Recommendations For Microsoft FrontPage 2000 Server Extensions version 1.1, consider restricting access to the shtml.exe component to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2000-0709

Affected Products

Frontpage 2000 Server Extensions

References · 4

• http://archives.neohapsis.com/archives/bugtraq/2000-08/0288.html · Vendor Advisory
• http://securityfocus.com/bid/1608 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0709 · Security Note
• http://msdn.microsoft.com/workshop/languages/fp/2000/sr12.asp · Note