CVE-2000-0260

This Perl script exploits a buffer overflow in dvwssr.dll, part of FrontPage 98 extensions for IIS, by sending an overly long GET request. The vulnerability can cause a denial of service and potentially allow remote code execution.

This exploit leverages a path obfuscation vulnerability in FrontPage 98 extensions for IIS (dvwssr.dll and mtd2lv.dll) to retrieve arbitrary .asp or .asa source files, including those outside the web root. The script encodes filenames using a specific algorithm and sends HTTP requests to exploit the flaw.