CVE-2000-0304
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2000-0304
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program, aka the "Undelimited .HTR Request" vulnerability.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft IIS 4.0/5.0畸形.HTR请求拒绝服务攻击漏洞(MS00-031)
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IIS是一款Windows NT/2000系统自带的的Web服务器软件，由Microsoft公司开发维护。IIS支持对一些特定文件名后缀(如.ASP、.IDC、.HTR)的文件请求执行进一步的处理，当服务器接到此类文件的请求时，每种后缀的文件由一个特定的DLL文件处理。ISM.DLL用于处理.HTR、.STM、.IDC为后缀的文件请求。 IIS在处理畸形的.htr请求时会导致服务器CPU占用率100%，必须重新启动才能恢复功能。 包含在虚拟目录中的.htr程序允许用户远程更改口令。如果用户提交一个畸形的更
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2000-0304
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2000-0304
请登录查看更多情报信息。
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-031vendor-advisoryx_refsource_MS
- https://nvd.nist.gov/vuln/detail/CVE-2000-0304
Same Patch Batch · n/a · 2000-07-12 · 140 CVEs total
| CVE-2000-0417 | Cayman 3220-H DSL路由器DoS漏洞 | |
| CVE-2000-0452 | Lotus Domino Server ESMTP远程缓冲区溢出漏洞 | |
| CVE-2000-0442 | Qualcomm Qpopper 'EUIDL'格式字符串输入漏洞 | |
| CVE-2000-0441 | AIX文件系统漏洞 | |
| CVE-2000-0439 | Microsoft Internet Explorer 安全漏洞 | |
| CVE-2000-0438 | Multiple Linux 供应商fdmount缓冲区溢出漏洞 | |
| CVE-2000-0437 | Gauntlet防火墙远程缓冲区溢出漏洞 | |
| CVE-2000-0436 | MetaProducts Offline Explorer目录遍历漏洞 | |
| CVE-2000-0435 | Allmanage管理员密码检索漏洞 | |
| CVE-2000-0432 | calender.pl/calendar_admin.pl脚本远程执行任意命令漏洞 | |
| CVE-2000-0431 | Cobalt RaQ2和RaQ3访问控制漏洞 | |
| CVE-2000-0428 | InterScan VirusWall 文件名转换器缓冲区溢出漏洞 | |
| CVE-2000-0427 | Aladdin Knowledge Systems eToken PIN Extraction 漏洞 | |
| CVE-2000-0425 | L-Soft Listserv 1.8 Web Archives的缓冲区溢出漏洞 | |
| CVE-2000-0424 | George Burgyan CGI Counter输入验证漏洞 | |
| CVE-2000-0421 | Bugzilla远程任意命令这些漏洞 | |
| CVE-2000-0419 | Microsoft Office 2000 UA Control漏洞 | |
| CVE-2000-0418 | Cayman 3220H DSL路由器 "ping of death"漏洞 | |
| CVE-2000-0404 | Microsoft Windows Computer Browser重置漏洞 | |
| CVE-2000-0402 | Microsoft SQL Server 7.0系统管理员密码泄露漏洞 |
Showing top 20 of 140 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2000-0304
No comments yet