Lucene search

K
cve[email protected]CVE-2000-1118
HistoryJan 09, 2001 - 5:00 a.m.

CVE-2000-1118

2001-01-0905:00:00
NVD-CWE-Other
web.nvd.nist.gov
25
cve-2000-1118
24link
web server
remote attack
access restrictions
http get
nvd

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

64.6%

24Link 1.06 web server allows remote attackers to bypass access restrictions by prepending strings such as “/+/” or “/.” to the HTTP GET request.

CPENameOperatorVersion
24link:24link24linkeq1.06

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

64.6%