CVE-2000-1196: Medium severity Netscape PublishingXpert vulnerability

Q: What is the severity of CVE-2000-1196?

CVE-2000-1196 is considered a medium severity vulnerability due to its potential for unauthorized access to sensitive files.

Q: How do I fix CVE-2000-1196?

To fix CVE-2000-1196, upgrade Netscape PublishingXpert to version 2.5 SP2 or later, which addresses this vulnerability.

Q: What is the impact of CVE-2000-1196?

The impact of CVE-2000-1196 allows remote attackers to read arbitrary files on the server, potentially leading to information disclosure.

Q: Who is affected by CVE-2000-1196?

Any users running Netscape PublishingXpert version 2.5 before SP2 are affected by CVE-2000-1196.

Q: Is CVE-2000-1196 being actively exploited?

While CVE-2000-1196 is an older vulnerability, it may still be exploited if the affected software is in use, so immediate remediation is recommended.

Published Aug 31, 2001

Updated

PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 allows remote attackers to read arbitrary files by specifying the target file in the errPagePath parameter.

Affected Software

1 affected component

Netscape PublishingXpert<=2.5

Remediation

Patch Available

http://docs.iplanet.com/docs/manuals/pubx/2.5.2_Relnotes.html

Event History

Aug 31, 2001

CVE Published

04:00 AM

Mar 9, 2002

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-1196?

CVE-2000-1196 is considered a medium severity vulnerability due to its potential for unauthorized access to sensitive files.

How do I fix CVE-2000-1196?

To fix CVE-2000-1196, upgrade Netscape PublishingXpert to version 2.5 SP2 or later, which addresses this vulnerability.

What is the impact of CVE-2000-1196?