CVE-2000-0709

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some components by requesting a URL whose name includes a standard DOS device name.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-08/0288.htmlPatch, Vendor Advisory
http://msdn.microsoft.com/workshop/languages/fp/2000/sr12.asp
http://www.securityfocus.com/bid/1608Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-08/0288.htmlPatch, Vendor Advisory
http://msdn.microsoft.com/workshop/languages/fp/2000/sr12.asp
http://www.securityfocus.com/bid/1608Patch, Vendor Advisory

Timeline

Published: Oct 20, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-07105.0The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the serv CVE-2000-07117.5Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attacker CVE-2000-07127.2Linux Intrusion Detection System (LIDS) 0.9.7 allows local users to gain root privileges when LIDS is disabled via the security=0 boot optio CVE-2000-07137.6Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitr CVE-2000-07147.2umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files.CVE-2000-07152.1DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a tempo CVE-2000-07162.6WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which CVE-2000-07175.0GoodTech FTP server allows remote attackers to cause a denial of service via a large number of RNTO commands.CVE-2000-07181.2A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed.CVE-2000-07196.2VariCAD 7.0 is installed with world-writeable files, which allows local users to replace the VariCAD programs with a Trojan horse program.CVE-2000-07205.0news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attac CVE-2000-07216.2The FSserial, FlagShip_c, and FlagShip_p programs in the FlagShip package are installed world-writeable, which allows local users to replace