CVE-2000-0097

Description

The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability.

Affected products

• microsoft / index_server2.0 – 2.0

Exploits & proofs of concept

• exploit-dbMicrosoft Index Server 2.0 / Indexing Service (Windows 2000) - Directory Traversalby fredrik.widlund

References

• MISChttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-006
• MISChttp://www.securityfocus.com/bid/950
• MISChttp://www.osvdb.org/1210