Novell NetWare Web Server 2.x - convert.bas
| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
 | CVE-1999-0175 | 29 Sep 199904:00 | – | cve |
 | CVE-1999-0175 | 29 Sep 199904:00 | – | cvelist |
 | EUVD-1999-0175 | 7 Oct 202500:30 | – | euvd |
 | CVE-1999-0175 | 1 Jul 199604:00 | – | nvd |
 | PT-1996-1032 · Novell · Novell Web Server | 1 Jul 199600:00 | – | ptsecurity |
 | CVE-1999-0175 | 7 Jan 202609:41 | – | redhatcve |
 | IRM Security Advisory 002: Netware Web Server Source Disclosure | 20 Dec 200100:00 | – | securityvulns |
source: https://www.securityfocus.com/bid/2025/info
Novell NetWare Web Server 2.x versions came with a CGI written in BASIC called convert.bas. This script allows retrieval of files outside of the normal web server context. This can be accomplished simply by submitting the filename and path as a parameter to the script, using relative paths (../../) to traverse directories. Access may or may not be limited to the SYS: volume.
http://targethost/scripts/convert.bas?../../anything/you/want/to/viewData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
12 Aug 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 25
EPSS0.06153