CVE-2000-0063: Medium severity Nortel Contivity vulnerability
cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the filename in a parameter to the script.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Nortel Contivity cgiproc CGI scriptfrom your environment.Uninstall or remove the cgiproc CGI script from the Nortel Contivity HTTP server. If removal is not possible, disable or remove execute permissions for the script to prevent remote invocation and arbitrary file reads.
- Compensating control
Restrict access to the Nortel Contivity HTTP server or the CGI endpoint to trusted IP addresses using firewall rules or ACLs to limit remote exposure until the vulnerable script is removed or mitigated.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0063?
CVE-2000-0063 is classified as a high-severity vulnerability due to its ability to allow arbitrary file reads from a remote location.
How do I fix CVE-2000-0063?
To mitigate CVE-2000-0063, it is advised to upgrade to a patched version of the Nortel Contivity HTTP server that resolves this security issue.
What type of attack can exploit CVE-2000-0063?
CVE-2000-0063 can be exploited through unauthorized access where attackers manipulate parameters to read sensitive files.
Which version of Nortel Contivity is affected by CVE-2000-0063?
CVE-2000-0063 specifically affects Nortel Contivity version 1.0.
Who is impacted by CVE-2000-0063?
Organizations using Nortel Contivity 1.0 for their HTTP server are at risk from CVE-2000-0063.