CVE Catalog

CVE-2000-0122

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
21.47%

97th percentile - higher than 97% of all known CVEs

Summary

Frontpage Server Extensions allow remote attackers to determine the physical path of a virtual directory via a GET request to the htimage.exe CGI program.

Risk Assessment

Attackers may gain access to directory structure information, potentially leading to further attacks on the system.

Recommendation

It is recommended to restrict access to the htimage.exe program and monitor server logs for unauthorized access attempts.

Original NVD description (English source)

Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET request to the htimage.exe CGI program.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS