Back to search
CVE-1999-1397
Published: Sep 1, 2004
Modified: Aug 1, 2024
PUBLISHED
Description
Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, whose permissions allows local and remote users to obtain the physical paths of directories that are being indexed.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
iis-indexserver-reveal-path(7559)
vdb-entry
x_refsource_XF
19990323 Index Server 2.0 and the Registry
mailing-list
x_refsource_BUGTRAQ
19990323 Index Server 2.0 and the Registry
mailing-list
x_refsource_NTBUGTRAQ
476
vdb-entry
x_refsource_BID
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now