GCVE-110-CERTCC-2001-910624

Advisory Published

Vulnetix · Advisory published May 10, 2001

There is a vulnerability in the way that Index Server 2.0 and the Indexing Service for Windows 2000 handle search requests. This vulnerability may alllow attackers to view the contents of "include" files located on the web server.

Download JSON Open in Console

Risk Scores

certcc-cam

impact4population10exploitation0widely_known15score_current3.825ease_of_exploitation17

Aliases

CVE-2001-0245

References

Microsoft Windows 2000 Indexing Service permits read access to files outside web root via crafted request

advisory

Microsoft Windows 2000 Indexing Service permits read access to files outside web root via crafted request

url

Microsoft Windows 2000 Indexing Service permits read access to files outside web root via crafted request

advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON