Vulnerability in Microsoft Index_server

CVE-2000-0098

Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist.

EPSS: 0.485 (98.7th percentile) — read the EPSS interpretation.

Affected products

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2000-0098?
CVE-2000-0098 is a vulnerability in Microsoft Index_server. Published 2000-01-26.
Is CVE-2000-0098 known to be exploited?
2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.