Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:MISC:INDEX-WEBHITS-ISAPI |
|---|---|
Severity |
Minor |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Microsoft Index Server WebHits ISAPI filter Information Disclosure |
Release Date |
2016/11/22 |
Update Number |
2806 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: Microsoft Index Server WebHits ISAPI filter Information Disclosure
There exists a vulnerability in Microsoft Index Server. Successful exploitation allows remote attackers to read arbitrary files.
Extended Description
The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability.
Affected Products
- Microsoft index_server 2.0
References
- CVE: CVE-2000-0097