CVE-2000-0098
MediumExploitation Probability (EPSS)
Very high risk99th percentile - higher than 99% of all known CVEs
Summary
Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist.
Risk Assessment
Attackers may gain access to the server's directory structure, potentially leading to further attacks or the disclosure of sensitive information.
Recommendation
It is recommended to update Microsoft Index Server and implement appropriate security measures to restrict access to directory structure information.
Other vulnerabilities in Microsoft Index Server
See all- CVE-2000-0302Medium
Microsoft Index Server allows remote attackers to view the source code of ASP files by appending %20 to the filename in the CiWebHitsFile argument to the null.htw URL.
- CVE-2000-0097Medium
The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, known as the 'Malformed Hit-Highlighting Argument' vulnerability.
Original NVD description (English source)
Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist.