PT-2001-1144 · Microsoft · Windows 2000+1

Publicado 2001-01-09 · Atualizado 2008-09-05 · CVE-2000-1105

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Indexing Services versions (affected versions not specified)

Description The issue concerns the ixsso.query ActiveX Object being marked as safe for scripting. This allows malicious website operators to embed a script that can remotely determine the existence of files on visiting Windows 2000 systems with Indexing Services enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2000-1105

Produtos afetados

Indexing Services

Windows 2000

Referências · 5

• 🔥 http://securityfocus.com/bid/1933 · Exploit
• 🔥 http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0074.html · Exploit
• 🔥 https://exploit-db.com/exploits/20399 · Exploit
• http://securityfocus.com/archive/1/144270 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-1105 · Nota de Segurança