CVE Catalog
CVE-2000-0098
MediumExploitation Probability (EPSS)
Very high risk48.54%
99th percentile - higher than 99% of all known CVEs
Summary
Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist.
Risk Assessment
Attackers may gain access to the server's directory structure, potentially leading to further attacks or the disclosure of sensitive information.
Recommendation
It is recommended to update Microsoft Index Server and implement appropriate security measures to restrict access to directory structure information.
Original NVD description (English source)
Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist.