The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2000-0096
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-006