1. CVE-Search
  2. CVE-2000-0782
ID CVE-2000-0782
Summary netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.
References
Vulnerable Configurations
  • cpe:2.3:a:netwin:netauth:*:*:*:*:*:*:*:*
    cpe:2.3:a:netwin:netauth:*:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 10-10-2017 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:N/A:N
refmap via4
bid 1587
bugtraq 20000817 Netauth: Web Based Email Management System
confirm http://netwinsite.com/netauth/updates.htm
xf netwin-netauth-dir-traverse(5090)
Last major update 10-10-2017 - 01:29
Published 20-10-2000 - 04:00
Last modified 10-10-2017 - 01:29
Back to Top