CVE-2000-0302
MediumExploitation Probability (EPSS)
Very high risk99th percentile - higher than 99% of all known CVEs
Summary
Microsoft Index Server allows remote attackers to view the source code of ASP files by appending %20 to the filename in the CiWebHitsFile argument to the null.htw URL.
Risk Assessment
Attackers may gain access to sensitive information contained in ASP files, potentially leading to data exposure or further attacks on the system.
Recommendation
It is recommended to update Microsoft Index Server to the latest version and implement appropriate security rules to restrict access to ASP files.
Other vulnerabilities in Microsoft Index Server
See all- CVE-2000-0097Medium
The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, known as the 'Malformed Hit-Highlighting Argument' vulnerability.
- CVE-2000-0098Medium
Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist.
Original NVD description (English source)
Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL.