PT-2000-1710 · Microsoft · Iis

Published 2000-10-20 · Updated 2018-10-30 · CVE-2000-0778

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IIS version 5.0

Description The issue allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header.

Recommendations For IIS version 5.0, update to a newer version to mitigate the risk.

Exploit

Fix

Related Identifiers

CVE-2000-0778

Affected Products

Iis

References · 9

• 🔥 https://exploit-db.com/exploits/20151 · Exploit
• 🔥 https://exploit-db.com/exploits/20152 · Exploit
• http://ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0008&L=ntbugtraq&F=&S=&P=5212 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0778 · Security Note
• http://securityfocus.com/bid/1578 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A927 · Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-058 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0778 · Note
• http://securityfocus.com/templates/archive.pike?list=1&msg=080D5336D882D211B56B0060080F2CD696A7C9%40beta.mia.cz · Note