CVE-2000-0630

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jul 17, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-06315.0An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing CVE-2000-06327.5Buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier allows remote attackers to execute arbitrary commands via aCVE-2000-06332.1Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system.CVE-2000-06345.0The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) atCVE-2000-06357.5The view_page.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metachaCVE-2000-06365.0HP JetDirect printers versions G.08.20 and H.08.20 and earlier allow remote attackers to cause a denial of service via a malformed FTP quoteCVE-2000-06374.6Microsoft Excel 97 and 2000 allows an attacker to execute arbitrary commands by specifying a malicious .dll using the Register.ID function, CVE-2000-063810.0bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the HOSTSVC paraCVE-2000-06397.5The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, which allows remote attackers to exeCVE-2000-06407.5Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, which provides differCVE-2000-06417.5Savant web server allows remote attackers to execute arbitrary commands via a long GET request.CVE-2000-06425.0The default configuration of WebActive HTTP Server 1.00 stores the web access log active.log in the document root, which allows remote attac
CVE-2000-0630: Medium severity, CVSS 5.0 | Vulnix