CVE:CVE-2001-0004
CNNVD:CNNVD-200102-033
IIS 5.0和4.0版本存在漏洞。远程攻击者可以通过在URL请求后添加"%3F+.htr"读取可执行web服务器程序源代码，导致文件通过.HTR ISAPI扩展名被解析，也称为"File Fragment Reading via .HTR"漏洞变种。
solution:Upgrade microsoft internet_information_server to a higher version than 4.0,and avoid the version 4.0; Upgrade microsoft internet_information_services to a higher version than 5.0,and avoid the version 5.0