Back

CVE-2001-0245

Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed search request, aka a new variant of the "Malformed Hit-Highlighting" vulnerability.

Published: Jun 27, 2001 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (2)

Vendor Product Version
microsoft index_server 2.0
microsoft indexing_service *

GitHub Security Advisory GHSA-4m5w-43cx-p687

Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote...

Risk Scores

CVSS Score 5.0 / 10
EPSS Score 14.35%

Top 4% most likely to be exploited

Threat Score 24.3 / 100

Data Sources

NVD EPSS GitHub