CVE-1999-1397 | BDVDB-2026-6733 Detail

Description#

Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, whose permissions allows local and remote users to obtain the physical paths of directories that are being indexed.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.iss.net/security_center/static/7559.php
http://marc.info/?l=bugtraq&m=92242671024118&w=2
http://marc.info/?l=ntbugtraq&m=92223293409756&w=2
http://www.securityfocus.com/bid/476

Exploit#

No public exploit known

History#

Version 12004-09-01Record published in the CVE List.
Version 22024-08-01Most recent update recorded in the CVE List.