Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtual directory.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Internet_information_server | Microsoft | 3.0 (including) | 3.0 (including) |
| Internet_information_server | Microsoft | 4.0 (including) | 4.0 (including) |