Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:index_server:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductIndex Server (a22207bf-938b-5ea4-a36e-5717f59cad18)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2001-0986 vulnerable 2026-06-08 04:45:21.212207 Details available
SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, file attributes, or portions of source code by directly calling sqlqhit.asp with a CiScope parameter set to (1) webinfo, (2) extended_fileinfo, (3) extended_webinfo, or (4) fileinfo.
Published: 2002-02-02T05:00:00.000Z
Updated: 2024-08-08T04:37:07.158Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0500 vulnerable 2026-06-08 04:45:20.365429 Details available
Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as commonly exploited by Code Red.
Published: 2002-03-09T05:00:00.000Z
Updated: 2024-08-08T04:21:38.559Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0245 vulnerable 2026-06-08 04:45:19.947186 Details available
Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed search request, aka a new variant of the "Malformed Hit-Highlighting" vulnerability.
Published: 2001-09-18T04:00:00.000Z
Updated: 2024-08-08T04:14:07.257Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0244 vulnerable 2026-06-08 04:45:19.946817 Details available
Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter.
Published: 2001-09-18T04:00:00.000Z
Updated: 2024-08-08T04:14:07.174Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0302 vulnerable 2026-06-08 04:44:58.448699 Details available
Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL.
Published: 2001-05-07T04:00:00.000Z
Updated: 2024-08-08T05:14:21.184Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0098 vulnerable 2026-06-08 04:44:58.388635 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0097 vulnerable 2026-06-08 04:44:58.388429 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-1397 vulnerable 2026-06-08 04:44:58.299112 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-1011 vulnerable 2026-06-08 04:44:58.185534 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.