CVE-2000-0739 Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTPS request to...
MediumCVSS 5.0
EPSS 2.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTPS request to the enrollment server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| network associates net tools pki server | = 1.0 | No fix listed |
| network associates net tools pki server | = 1.0hotfix1 | No fix listed |
| network associates net tools pki server | = 1.0hotfix2 | No fix listed |
References
- 20000802 NAI Net Tools PKI Server vulnerabilities mailing-list vendor-advisory
- download.nai.com
- 1489 vdb-entry
- 1537 exploit patch vdb-entry vendor-advisory
- nettools-pki-dir-traverse(5066) vdb-entry