The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Frontpage | Microsoft | * | * |