CVE-2000-0240 vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a .. (dot dot) attack.
MediumCVSS 5.0
EPSS 7.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a .. (dot dot) attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vqsoft vqserver | = 1.9.9 | No fix listed |
References
- 270 vdb-entry
- 1067 exploit patch vdb-entry vendor-advisory
- 20000321 vqserver /........../ mailing-list
- www.vqsoft.com url-repurposed