CVE-2000-0304
MediumExploitation Probability (EPSS)
Very high risk98th percentile - higher than 98% of all known CVEs
Summary
Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program, known as the 'Undelimited .HTR Request' vulnerability.
Risk Assessment
An attacker can exploit this vulnerability to disrupt server operations, leading to service unavailability for users.
Recommendation
It is recommended to upgrade to the latest version of Microsoft IIS and to remove or block the IISADMPWD virtual directory if it is not needed.
Original NVD description (English source)
Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program, aka the "Undelimited .HTR Request" vulnerability.