medium5.0Public exploit code
CVE-2000-0097
The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Index Server 2.0 / Indexing Service (Windows 2000) - Directory Traversal2000-01-26 · remote · windows · Verified
Impact
The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Index Server | Version 2.0 |
References
- NVD record
- CVE.org record
- http://www.osvdb.org/1210
- http://www.securityfocus.com/bid/950
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-006
- http://www.osvdb.org/1210
- http://www.securityfocus.com/bid/950
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-006