PT-2001-1144 · Microsoft · Windows 2000+1

Published 2001-01-09 · Updated 2008-09-05 · CVE-2000-1105

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Indexing Services versions (affected versions not specified)

Description The issue concerns the ixsso.query ActiveX Object being marked as safe for scripting. This allows malicious website operators to embed a script that can remotely determine the existence of files on visiting Windows 2000 systems with Indexing Services enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2000-1105

Affected Products

Indexing Services

Windows 2000

References · 5

• 🔥 http://securityfocus.com/bid/1933 · Exploit
• 🔥 http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0074.html · Exploit
• 🔥 https://exploit-db.com/exploits/20399 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-1105 · Security Note
• http://securityfocus.com/archive/1/144270 · Note