CVE-2000-0687: Critical severity CGI Script Center Auction Weaver vulnerability

Q: Who can exploit this issue?

A remote attacker can exploit it over the network without authentication. The attack targets the Auction Weaver CGI script's catdir parameter.

Q: What access could exploitation provide?

Successful exploitation allows an attacker to read arbitrary files accessible to the CGI script. The vulnerability is rated critical and affects confidentiality, integrity, and availability according to the supplied vector.

Q: Which versions are affected?

Auction Weaver CGI script version 1.03 and earlier are affected.

Published Sep 21, 2000

Updated

Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter.

Affected Software

1 affected component

CGI Script Center Auction Weaver<=1.02

Event History

Sep 21, 2000

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

Who can exploit this issue?

A remote attacker can exploit it over the network without authentication. The attack targets the Auction Weaver CGI script's catdir parameter.

What access could exploitation provide?

Successful exploitation allows an attacker to read arbitrary files accessible to the CGI script. The vulnerability is rated critical and affects confidentiality, integrity, and availability according to the supplied vector.

Which versions are affected?

Auction Weaver CGI script version 1.03 and earlier are affected.

CVE-2000-0687: Critical severity CGI Script Center Auction Weaver vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What access could exploitation provide?

Which versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What access could exploitation provide?

Which versions are affected?