Vulnerabilities for Index server (...) - CXSECURITY.COM

Vulnerabilities for 'Index server'

2001-09-14

CVE-2001-0986

CWE-Other

SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, file attributes, or portions of source code by directly calling sqlqhit.asp with a CiScope parameter set to (1) webinfo, (2) extended_fileinfo, (3) extended_webinfo, or (4) fileinfo.

2001-07-21

CVE-2001-0500

CWE-Other

Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as commonly exploited by Code Red.

2001-06-27

CVE-2001-0245

CWE-Other

Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed search request, aka a new variant of the "Malformed Hit-Highlighting" vulnerability.

CVE-2001-0244

CWE-Other

Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter.

2000-03-31

CVE-2000-0302

CWE-Other

Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL.

2000-01-26

CVE-2000-0098

CWE-Other

Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist.

CVE-2000-0097

CWE-Other

The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability.

1999-03-23

CVE-1999-1397

Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, whose permissions allows local and remote users to obtain the physical paths of directories that are being indexed.

1999-07-19

CVE-1999-1011

The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.

>>> Vendor: Microsoft 622 Products

Exchange server

Internet information server

Personal web server

Commerce server

Backoffice resource kit

Terminal server

Java virtual machine

Commercial internet system

Site server commerce

Outlook express

Windows explorer

Data access components

Index server

Zero administration kit

Msn setup bulletin board services

Visual interdev

Office converter pack

Systems management server

Virtual machine

Home publishing

Windows media services

Windows messaging

Windows media rights manager

Active movie control

Network monitor

Windows media player

Indexing service

Windows script host

Frontpage server extensions

Windows 2000 terminal services

Xml core services

Msn chat control

Msn messenger service for exchange

Windows 98 plus pack

Microsoft data access components

Metadirectory services

Content management server

Tsac activex control

Office web components

Ie for macintosh

.net windows server

Directx files viewer control

File transfer manager

Baseline security analyzer

Foundation class library

Windows 2003 server

Network firmware

See all Products for Vendor Microsoft

Copyright 2024, cxsecurity.com