CVE ID:	CVE-2001-0986
Description:	SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, file attributes, or portions of source code by directly calling sqlqhit.asp with a CiScope parameter set to (1) webinfo, (2) extended_fileinfo, (3) extended_webinfo, or (4) fileinfo.
Test IDs:	1.3.6.1.4.1.25623.1.0.10765
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2001-0986 BugTraq ID: 3339 http://www.securityfocus.com/bid/3339 Bugtraq: 20010914 Security Vulnerability with Microsoft Index Server 2.0(Sample file reveals file info, physical path etc) (Google Search) http://www.securityfocus.com/archive/1/214217 XForce ISS Database: winnt-indexserver-sqlqhit-asp(7125) https://exchange.xforce.ibmcloud.com/vulnerabilities/7125