Vulners
Lucene search
accipiter.txt
| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
 | CVE-2000-1075 | 7 May 200104:00 | – | cve |
 | CVE-2000-1075 | 7 May 200104:00 | – | cvelist |
 | EUVD-2000-1061 | 7 Oct 202500:30 | – | euvd |
 | iPlanet Directory Server Traversal Arbitrary File Access | 8 Jan 200100:00 | – | nessus |
| iPlanet Certificate Management Traversal Arbitrary File Access | 29 May 200100:00 | – | nessus |
 | CVE-2000-1075 | 11 Dec 200005:00 | – | nvd |
 | [Full-Disclosure] Directory Traversal in Accipiter Direct Server 6.0 | 11 Jan 200400:00 | – | securityvulns |
`- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
-
~ Severity: High
~ Title: Accipiter Direct Server
~ Date: January 09, 2004
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
-
Synopsis
========
A security vulnerability has been found in Accipiter Direct Server 6
that allows retrieval of arbitrary files.
Background
==========
Accipiter Direct Server is responsible for advertisement handling for
badge and banner ads as well as advertisement tracking. The Direct
server acts as an http server listening for specially formed requests.
It is a proprietary system and cannot be disabled.
Description
===========
Arbitrary files can be viewed by using the exploit detailed in
CVE-2000-1075
Attacker traverses the http server and retrieves arbitrary files by
sending specially formed requests through a web browser.
http://accipiterserver/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cboot.ini
Workaround
==========
Vendor will be providing a patch with the next major release. Until
then you may run your accipiter direct server as an unprivileged user
restricted to the webroot.
Mark Bassett
Network Administrator
World media company
Omaha.com
402-898-2079
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
09 Jan 2004 00:00Current
6.7Medium risk
Vulners AI Score6.7
EPSS0.04012