CVE-2000-0097
MediumExploitation Probability (EPSS)
Very high risk98th percentile - higher than 98% of all known CVEs
Summary
The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, known as the 'Malformed Hit-Highlighting Argument' vulnerability.
Risk Assessment
Attackers may gain access to sensitive data stored on the server, potentially leading to serious security breaches.
Recommendation
It is recommended to update Microsoft Index Server to the latest version and implement appropriate security rules to minimize risk.
Other vulnerabilities in Microsoft Index Server
See all- CVE-2000-0302Medium
Microsoft Index Server allows remote attackers to view the source code of ASP files by appending %20 to the filename in the CiWebHitsFile argument to the null.htw URL.
- CVE-2000-0098Medium
Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist.
Original NVD description (English source)
The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability.