1. CVE-Search
  2. CVE-2000-0436
ID CVE-2000-0436
Summary MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) attack.
References
Vulnerable Configurations
  • cpe:2.3:a:metaproducts:offline_explorer:1.0:*:*:*:*:*:*:*
    cpe:2.3:a:metaproducts:offline_explorer:1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:metaproducts:offline_explorer:1.1:*:*:*:*:*:*:*
    cpe:2.3:a:metaproducts:offline_explorer:1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:metaproducts:offline_explorer:1.2:*:*:*:*:*:*:*
    cpe:2.3:a:metaproducts:offline_explorer:1.2:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 10-09-2008 - 19:04)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:N/A:N
refmap via4
bid 1231
bugtraq 20000522 MetaProducts Offline Explorer Directory Traversal Vulnerability
confirm http://www.metaproducts.com/mpOE-HY.html
xf offline-explorer-directory-traversal
Last major update 10-09-2008 - 19:04
Published 19-05-2000 - 04:00
Last modified 10-09-2008 - 19:04
Back to Top