CVE-1999-1397

Summary

CVE-1999-1397 is a vulnerability affecting Index Server 2.0 on Internet Information Services (IIS) 4.0. The issue lies in the way Index Server stores physical path information in the ContentIndex\\Catalogs subkey of the AllowedPaths registry key. Due to insufficient permissions, both local and remote users can access this information, thereby obtaining the physical paths of directories being indexed. This vulnerability could potentially be exploited to gain unauthorized access to sensitive data or execute malicious code.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.