CVE-2000-0705: Undefined Security Weakness

ntop running in web mode allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0443: Undefined Security Weakness

The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0282: Undefined Security Weakness

TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. dot dot attack on the webplus CGI program...

CVE-2000-0191: Undefined Security Weakness

Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. dot dot attack...

CVE-1999-0927: Undefined Security Weakness

NTMail allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0660: Undefined Security Weakness

The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0634: Undefined Security Weakness

The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0664: Undefined Security Weakness

AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified .. dot dot attack that uses the %2E URL encoding for the dots...

CVE-2000-0782: Undefined Security Weakness

netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0686

Auction Weaver CGI script 1.03 and earlier is affected by a traversal flaw that lets remote attackers read arbitrary files through a .. attack in the fromfile parameter. Affected product: Auction Weaver LITE (1.0–1.04) per historical advisories; impact is remote file disclosure. Patch available: ...

CVE-2000-0687: Undefined Security Weakness

Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack in the catdir parameter...

AnalogX "SimpleServer:WWW" dot dot bug

Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory AnalogX "SimpleServer:WWW" dot dot bug ---------------------------------------------------------------------- FS Advisory ID: FS-072600-8-ANA Release Date: July 26, 2000 Product: SimpleServer:WWW Vendor:...

FS-072600-8-ANA.txt

Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory AnalogX "SimpleServer:WWW" dot dot bug ---------------------------------------------------------------------- FS Advisory ID: FS-072600-8-ANA Release Date: July 26, 2000 Product: SimpleServer:WWW Vendor:...

CVE-2000-0174

StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0660

The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0303

Quake3 Arena is affected by CVE-2000-0303 due to a path traversal (dot dot) vulnerability that enables a malicious server operator to read or modify files on a client. The issue, described in the NVD entry, indicates a network-accessible vector with low attack complexity and no authentication req...

CVE-2000-0436

Technical details about CVE-2000-0436 are not publicly provided in the supplied documents; no affected versions, root cause, or remediation information are disclosed here. Monitor for updates.

CVE-2000-0303

Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot .. attack...

CVE-2000-0261

The AVM KEN! web server allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0674

ftp.pl CGI program for Virtual Visions FTP browser allows remote attackers to read directories outside of the document root via a .. dot dot attack...