CVE-2000-0098: Undefined Security Weakness

Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist...

CVE-2000-0097: Undefined Security Weakness

The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability...

CVE-2000-0098

Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist...

CVE-2000-0097

The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability...

Microsoft Index Server 2.0 Indexing Service (Windows 2000) - Directory Traversal

Microsoft Index Server 2.0 Indexing Service Windows 2000 - Directory Traversal // source: https://www.securityfocus.com/bid/950/info Index Server 2.0 is a utility included in the NT 4.0 Option Pack. The functionality provided by Index Service has been built into Windows 2000 as Indexing Services...

Microsoft Index Server 2.0 / Indexing Service (Windows 2000) - Directory Traversal

// source: https://www.securityfocus.com/bid/950/info Index Server 2.0 is a utility included in the NT 4.0 Option Pack. The functionality provided by Index Service has been built into Windows 2000 as Indexing Services. When combined with IIS, Index Server and Indexing Services include the ability...

nt4.index.server.2.0.txt

Date: Tue, 23 Mar 1999 23:40:55 -0000 From: Mnemonix To: [email protected] Subject: Index Server 2.0 and the Registry When Microsoft's Index Server 2.0 is installed on NT 4 with Internet Information Server 4 it opens a new "AllowedPath" into the Windows NT Registry. Administrators...

CVE-1999-1397

Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, whose permissions allows local and remote users to obtain the physical paths of directories that are being indexed...