Description
Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed search request, aka a new variant of the "Malformed Hit-Highlighting" vulnerability.
References (2)
Core 2
Core References
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-025
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/6518
Scores
EPSS
0.1435
EPSS Percentile
96.3%
Details
Status
published
Products (2)
microsoft/index_server
2.0
microsoft/indexing_service
Published
Jun 27, 2001
Tracked Since
Feb 18, 2026