Index Server (Microsoft) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2001-09-14. Vendor: Microsoft.
CVEs of Index Server
- CVE-2001-0986 - CVSS 5 (medium), 2001-09-14: SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, file attributes, or…
- CVE-2001-0500 - CVSS 10 (critical), 2001-07-21: Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute…
- CVE-2001-0244 - CVSS 7.5 (high), 2001-06-27: Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter.
- CVE-2001-0245 - CVSS 5 (medium), 2001-06-27: Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed…
- CVE-2000-0302 - CVSS 5 (medium), 2000-03-31: Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the…
- CVE-2000-0098 - CVSS 5 (medium), 2000-01-26: Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist.
- CVE-2000-0097 - CVSS 5 (medium), 2000-01-26: The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability.
- CVE-1999-1011 - CVSS 10 (critical), 1999-07-19: The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote…
- CVE-1999-1397 - CVSS 7.5 (high), 1999-03-23: Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, whose permissions allows…
