CVE-2000-0457
HighExploitation Probability (EPSS)
Very high risk99th percentile - higher than 99% of all known CVEs
Summary
The vulnerability in ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by sending a request to the file with a large number of encoded spaces (%20) and ending with a .htr extension.
Risk Assessment
Attackers may gain access to sensitive data stored in files, potentially leading to a breach of system security.
Recommendation
It is recommended to upgrade to a newer version of IIS and implement appropriate security measures to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large number of encoded spaces (%20) and terminated with a .htr extension, aka the ".HTR File Fragment Reading" or "File Fragment Reading via .HTR" vulnerability.