Index Server Security Vulnerabilities and Issues — Index Server CVE List

Lucene search

MicrosoftIndex Server

9 matches found

CVE•added 2002/03/09 5:0 a.m.•381 views

CVE-2001-0500

Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as common...

10CVSS7.5AI score0.91027EPSS

CVE•added 2000/03/22 5:0 a.m.•70 views

CVE-2000-0097

The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability.

5CVSS6.6AI score0.60867EPSS

CVE•added 2000/06/02 4:0 a.m.•63 views

CVE-1999-1011

The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.

10CVSS7.4AI score0.79296EPSS

CVE•added 2001/05/07 4:0 a.m.•57 views

CVE-2000-0302

Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL.

5CVSS6.7AI score0.76653EPSS

CVE•added 2002/02/02 5:0 a.m.•51 views

CVE-2001-0986

SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, file attributes, or portions of source code by directly calling sqlqhit.asp with a CiScope parameter set to (1) webinfo, (2) extended_fileinfo, (3) extended_webin...

5CVSS6.1AI score0.7406EPSS

CVE•added 2000/03/22 5:0 a.m.•50 views

CVE-2000-0098

Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist.

5CVSS6.6AI score0.8269EPSS

CVE•added 2001/09/18 4:0 a.m.•38 views

CVE-2001-0245

Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed search request, aka a new variant of the "Malformed Hit-Highlighting" vulnerability.

5CVSS6.5AI score0.3735EPSS

CVE•added 2004/09/01 4:0 a.m.•34 views

CVE-1999-1397

Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, whose permissions allows local and remote users to obtain the physical paths of directories that are being indexed.

7.5CVSS6.3AI score0.01787EPSS

CVE•added 2001/09/18 4:0 a.m.•34 views

CVE-2001-0244

Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter.

7.5CVSS7.7AI score0.09125EPSS