CVEvulnerability

CVE-1999-1397

7.5 HIGH Published 1999-03-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
1999-03-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, whose permissions allows local and remote users to obtain the physical paths of directories that are being indexed.

Affected configurations

• microsoft index server 2.0

References