Description
Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-006
Scores
EPSS
0.4854
EPSS Percentile
98.8%
Details
Status
published
Products (1)
microsoft/index_server
2.0
Published
Jan 26, 2000
Tracked Since
Feb 18, 2026