CVE-2000-0782 netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.
MediumCVSS 5.0
EPSS 7.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netwin netauth | <= 4.2 | No fix listed |
References
- netwinsite.com
- 1587 exploit patch vdb-entry vendor-advisory
- 20000817 Netauth: Web Based Email Management System mailing-list
- netwin-netauth-dir-traverse(5090) vdb-entry