CVE Catalog
CVE-2000-0302
MediumExploitation Probability (EPSS)
Very high risk68.80%
99th percentile - higher than 99% of all known CVEs
Summary
Microsoft Index Server allows remote attackers to view the source code of ASP files by appending %20 to the filename in the CiWebHitsFile argument to the null.htw URL.
Risk Assessment
Attackers may gain access to sensitive information contained in ASP files, potentially leading to data exposure or further attacks on the system.
Recommendation
It is recommended to update Microsoft Index Server to the latest version and implement appropriate security rules to restrict access to ASP files.
Original NVD description (English source)
Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL.