CVE-2000-0114

Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtual directory.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

47.59% chance of exploitation in the next 30 days, 99th percentile

Nuclei

medium

Published

2000-02-08

Updated

2024-08-08

Proof-of-concept exploits (3)

• 0xMe5war/CVE-2000-01140★ · 2024-07-11
• Cappricio-Securities/CVE-2000-01142★ · 2024-06-24
• adhamelhansye/CVE-2000-01140★ · 2024-07-11

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2000/CVE-2000-0114.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2009-0347
• CVE-2012-5321
• CVE-2015-1635
• CVE-2015-7297
• CVE-2017-7269
• CVE-2018-11784