CVE-2000-0850

Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" where ext is .ccc, .class, or .jpg to the requested URL...

CVE-2000-0850

The CVE-2000-0850 entry corresponds to Netegrity SiteMinder prior to version 4.11, where an authentication bypass is possible by appending "$/FILENAME.ext" to the requested URL. The exploit targets the authentication check and can succeed with extensions such as .ccc, .class, or .jpg, effectively...

CVE-2000-0850

Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" where ext is .ccc, .class, or .jpg to the requested URL...