CVE-2000-0739: Medium severity Network Associates Net Tools Pki Server vulnerability

Published Oct 20, 2000

Updated

Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTPS request to the enrollment server.

Affected Software

3 affected components

Network Associates Net Tools Pki Server=1.0

Network Associates Net Tools Pki Server=1.0hotfix1

Network Associates Net Tools Pki Server=1.0hotfix2

Remediation

Patch Available

http://www.securityfocus.com/bid/1537

Event History

Oct 20, 2000

CVE Published

04:00 AM

Mar 9, 2002

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-0739?

CVE-2000-0739 is considered to be a medium severity vulnerability due to the potential for unauthorized access to sensitive files.

How do I fix CVE-2000-0739?

To fix CVE-2000-0739, upgrade to a version of NAI Net Tools PKI server that includes HotFix 3 or later.

What type of attack is associated with CVE-2000-0739?

CVE-2000-0739 is associated with a directory traversal attack that exploits the strong.exe program.

Which versions of NAI Net Tools PKI server are affected by CVE-2000-0739?

CVE-2000-0739 affects versions 1.0, 1.0 hotfix 1, and 1.0 hotfix 2 of NAI Net Tools PKI server.

What can attackers achieve by exploiting CVE-2000-0739?

By exploiting CVE-2000-0739, attackers can read arbitrary files on the server, potentially compromising sensitive information.