1053 matches found
Microsoft Windows 2000 Indexing Services enumerates local file locations via ixsso.query ActiveX object
Overview Index Server 2.0 and the Indexing Service 3.0 contain a vulnerability that may allow remote intruders to gain information about files on the local computer. Description Index Server 2.0 and Indexing Service 3.0 are services that allow information about local files to be queried via a web...
Retrieving information on local files in IE (GM#003-IE)
GreyMagic Security Advisory GM003-IE ===================================== By GreyMagic Software, Israel. 27 Mar 2002. Available in HTML format at http://security.greymagic.com/adv/gm003-ie/. Topic: Retrieving information on local files in IE. Discovery date: 18 Feb 2002. Affected applications:...
Security Vulnerability with Microsoft Index Server 2.0(Sample fil e reveals file info, physical path etc)
Hi I noticed index server sample file is vulnerable which reveals file info and physical path. Vulnerable Microsoft Index Server 2.0 + IIS 4.0 + Windows NT Server 4.0 + Service Pack 6a Details The Index Server Sample file SQLQHit.asp shipped with Microsoft Index Server 2.0 and Option pack 4.0 , i...
Microsoft Index Server 2.0 - File Information Full Path Disclosure
Microsoft Index Server 2.0 - File Information Full Path Disclosure source: https://www.securityfocus.com/bid/3339/info The sqlqhit.asp sample file is used for performing web-based SQL queries. Malicious users could send specifically crafted HTTP request to an Internet Information Services server...
CVE-1999-0212
Solaris rpc.mountd generates error messages that allow a remote attacker to determine what files are on the server...
CVE-1999-0490
MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG SRC tag...
Security update 1970-01-01
...
Internet Explorer help
None None...
Microsoft Support
None None...
Internet Explorer help
None None...
Microsoft Teams help & learning
None None...
Security update 1970-01-01
...
MS10-073: Vulnerabilities in Windows kernel-mode drivers could allow elevation of privilege
None None...
MS10-058: Vulnerabilities in TCP/IP could allow elevation of privilege
None None...
MS10-030: Vulnerability in Outlook Express and Windows Mail could allow remote code execution
None None...
MS10-001: Vulnerability in the Embedded OpenType Font Engine could allow remote code execution
None None...
MS08-067: Vulnerability in Server service could allow remote code execution
None None...
MS08-030: Vulnerability in Bluetooth stack could allow remote code execution
None None...