CVE-2000-0097

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Jan 26, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-00985.0Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file t CVE-2000-00997.2Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.CVE-2000-01007.2The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing CVE-2000-01017.5The Make-a-Store OrderPage shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-01027.5The SalesCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-01037.5The SmartCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-01047.5The Shoptron shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-01055.0Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable CVE-2000-01067.5The EasyCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-01077.2Linux apcd program allows local attackers to modify arbitrary files via a symlink attack.CVE-2000-01087.5The Intellivend shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-010910.0The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts that have no passwords o