CVE-2000-0835 search.dll Sambar ISAPI Search utility in Sambar Server 4.4 Beta 3 allows remote attackers to read arbitrary directories by specifying the directory in the query parameter.
MediumCVSS 5.0
EPSS 2.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
search.dll Sambar ISAPI Search utility in Sambar Server 4.4 Beta 3 allows remote attackers to read arbitrary directories by specifying the directory in the query parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sambar server | = 4.3 | No fix listed |
| sambar server | = 4.4-beta3 | No fix listed |
References
- 20000915 Sambar Server search CGI vulnerability mailing-list
- 1684 exploit patch vdb-entry vendor-advisory