CVE-2000-0098

Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist...

PT-2000-1112 · Microsoft · Iis

Name of the Vulnerable Software and Affected Versions: IIS versions 3 and 4 Description: The issue allows remote attackers to read files via a .. dot dot attack, potentially exposing sensitive information. This is made possible by sample Internet Data Query IDQ scripts in the affected IIS version...