CVE

Id
2672  
CVE No.
CVE-2000-1105  
Status
Candidate  
Description
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled.  
Phase
Proposed (20001219)  
Votes
ACCEPT(2) Baker, Cole | MODIFY(1) Frech | REVIEWING(2) Christey, Wall  
Comments
Frech> XF:win2k-index-service-ixsso(5502) | Christey> ADDREF MS:MS00-098 | ADDREF XF:win2k-index-service-activex | URL:http://xforce.iss.net/static/5800.php | Add "aka the "Indexing Service File Enumeration" vulnerability" | to the description. | CHANGE> [Christey changed vote from NOOP to REVIEWING] | Christey> DUPE CVE-2001-0245? Need to check w/Microsoft.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
10505 2672 CVE-2000-1105 BUGTRAQ:20001110 IE 5.x Win2000 Indexing service vulnerability  View
10506 2672 CVE-2000-1105 URL:http://www.securityfocus.com/archive/1/144270  View
10507 2672 CVE-2000-1105 WIN2KSEC:20001110 IE 5.x Win2000 Indexing service vulnerability  View
10508 2672 CVE-2000-1105 URL:http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0074.html  View
10509 2672 CVE-2000-1105 BID:1933  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64325 JVNDB-2000-000105 Microsoft Indexing Services における ファイル列挙の脆弱性 Microsoft Windows に含まれる Indexing Services には、特別な形式の HTML を用いて Indexing Services を利用された場合に、 Windows システム上のファイルの存在を確認されてしまう脆弱性が存在します。 CVE-2000-1105 2672 4.3 http://jvndb.jvn.jp/ja/contents/2000/JVNDB-2000-000105.html  View