Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtual directory.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Internet_information_server | Microsoft | 3.0 (including) | 3.0 (including) |
Internet_information_server | Microsoft | 4.0 (including) | 4.0 (including) |