CVE-2000-0114

Medium

Published: 02/02/2000(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

47.60%

99th percentile - higher than 99% of all known CVEs

Summary

Frontpage Server Extensions allow remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtual directory.

Risk Assessment

Attackers may exploit this vulnerability to gain information about the anonymous account, potentially leading to further attacks on the system.

Recommendation

It is recommended to block access to shtml.dll or implement appropriate security measures to protect against unauthorized access.

Original NVD description (English source)

Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtual directory.