Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2000-0778

EPSS 78.62% · P99
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2000-0778

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, aka the "Specialized Header" vulnerability.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft IIS 5.0 "Translate: f"头标记导致源码泄露漏洞(MS00-058)
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IIS是Microsoft公司开发的流行的HTTP服务器程序,随同Windows操作系统捆绑发布。 IIS 5.0在处理某些带有特殊标记的HTTP请求时存在漏洞,远程攻击者可能利用此漏洞得到服务器上脚本的源码。 如果IIS 5.0接收到一个包含特殊头格式(Translate: f)的HTTP请求,同时URL末尾包含一个特殊字符("/")的话,IIS 会错误得调用脚本处理引擎,可能导致文件源码泄漏给远程用户。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2000-0778

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2000-0778

登录查看更多情报信息。

Same Patch Batch · n/a · 2000-10-13 · 261 CVEs total

CVE-2000-0613Cisco Secure PIX防火墙伪造TCP RST漏洞
CVE-2000-0586Dalnet IRC Server "SUMMON"缓冲区溢出漏洞
CVE-2000-0587glftpd privpath指令漏洞
CVE-2000-0588Flowerfire Sawmill文件访问漏洞
CVE-2000-0591Novell BorderManager URL规则限制绕过漏洞
CVE-2000-0594BitchX IRC客户端"/INVITE"格式字符串漏洞
CVE-2000-0595libedit任意命令执行漏洞
CVE-2000-0596Microsoft Internet Explorer 安全漏洞
CVE-2000-0597Microsoft Internet Explorer 5.01 和Excel/Powerpoint 2000 ActiveX 对象执行漏洞
CVE-2000-0598Fortech Proxy+远程登录网关漏洞
CVE-2000-0599iMesh.Com iMesh 1.02缓冲区溢出漏洞
CVE-2000-0601LeafDigital LeafChat 1.7 DoS漏洞
CVE-2000-0602Secure Locate LOCATE_PATH认证漏洞
CVE-2000-0603Microsoft SQL Server 许可绕过漏洞
CVE-2000-0604Red Hat Linux gkermit文件修改漏洞
CVE-2000-0610NetWin dMailWeb and cwMail认证漏洞
CVE-2000-0611NetWin dMailWeb和 cwMai拒绝服务漏洞
CVE-2000-0634CommuniGate漏洞
CVE-2000-0635MiniVend shopping cart任意命令执行漏洞
CVE-2000-0636HP JetDirect打印机服务拒绝漏洞

Showing top 20 of 261 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2000-0778

No comments yet


Leave a comment