CVE-2000-0302

CVE Database · CVE-2000-0302

CVE-2000-0302

· N/AModified

CVSS v3.1

N/A

EPSS

68.80%

Published

Mar 31, 2000

Modified

Apr 15, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBMicrosoft Index Server 2.0 - '%20' ASP Source Disclosure TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL.

Affected Products (1)

microsoft · index_servervulnerable

References (8)

http://marc.info/?l=bugtraq&m=95453598317340&w=2

http://www.osvdb.org/271

http://www.securityfocus.com/bid/1084

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-006

http://marc.info/?l=bugtraq&m=95453598317340&w=2

http://www.osvdb.org/271

http://www.securityfocus.com/bid/1084

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-006

KEV Catalog EPSS Scores Vendors All CVEs