CVE-2000-1196 PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 allows remote attackers to read arbitrary files by specifying the target file in the errPagePath parameter.

MediumCVSS 5.0 EPSS 3.8% Public exploit

Published: 2002-03-09 07:00
Updated: 2026-06-17 00:53
Exploit status: Public exploit available

Description

PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 allows remote attackers to read arbitrary files by specifying the target file in the errPagePath parameter.

Affected products

Product	Affected versions	Fixed in
netscape publishingxpert	<= 2.5	No fix listed

References

docs.iplanet.com patch vendor-advisory
packetstormsecurity.org exploit vendor-advisory
publishingxpert-pscoerrpage-url(7362) vdb-entry

CVSS v2.0

5.0 Medium

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 3.77% (percentile 90.1)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

Netscape PublishingXPert 2.0/2.2/2.5 - Local File Reading Exploit · Exploit Database (OffSec) · 2000-04-06