Lucene search
HistoryDec 19, 2000 - 5:00 a.m.
CVE-2000-0920
cve-2000-0920
information security document
boa web server
vulnerability
get http request
nvd.
6.8 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.025 Low
EPSS
Percentile
90.0%
Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files via a modified … (dot dot) attack in the GET HTTP request that uses a “%2E” instead of a “.”
| CPE | Name | Operator | Version |
|---|---|---|---|
| boa:boa_webserver | boa boa webserver | le | 0.94.8.2 |
Related
securityvulns
securityvulns
Boa (with Intersil Extensions) - HTTP Basic Authentication Bypass
2007-09-17 00:00:00
nessus
nessus
Boa Web Server Traversal Arbtirary File Access/Execution
2000-10-06 00:00:00
openvas
openvas
Boa file retrieval
2005-11-03 00:00:00
Boa file retrieval
2005-11-03 00:00:00
zdt
zdt
BOA Web Server 0.94.8.2 - Arbitrary File Access Vulnerability
2015-04-09 00:00:00
6.8 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.025 Low
EPSS
Percentile
90.0%
Related for CVE-2000-0920