← All CVEs

CVE-2000-0304

medium · 5

Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program, aka the "Undelimited .HTR Request" vulnerability.

5
CVSS
29.1%
EPSS (exploit prob.)
98th
EPSS percentile
2000-05-10
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

VendorProductAffected versions
microsoftinternet_information_server4.0
microsoftinternet_information_services5.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2000-0304