CVE-1999-1397

None

CVSS

—

EPSS

11.7%

Published

Mar 23, 1999

CISA due date

—

The record

Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, whose permissions allows local and remote users to obtain the physical paths of directories that are being indexed.

Affected packages

Ecosystem	Package	Introduced	Fixed