CVE-2000-0282

The CVE-2000-0282 issue affects TalentSoft Web+ WebPlus CGI (webplus) used in the Web+ shopping cart. The vulnerability is a traversal flaw in the webplus CGI that allows remote attackers to read arbitrary files by using a .. (dot dot) path traversal in the CGI request (e.g., /cgi-bin/webplus?scr...

CVE-2000-0782

netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0191

The CVE-2000-0191 issue affects Axis StorPoint CD. A directory traversal vulnerability allows remote attackers to reach administrator URLs without authentication by exploiting a .. sequence, enabling an authentication bypass. The Nessus entry references a specific crafted URL path (e.g., /cd/../c...

CVE-2000-0686

Auction Weaver CGI script 1.03 and earlier is affected by a traversal flaw that lets remote attackers read arbitrary files through a .. attack in the fromfile parameter. Affected product: Auction Weaver LITE (1.0–1.04) per historical advisories; impact is remote file disclosure. Patch available: ...

CVE-2000-0674

ftp.pl CGI program for Virtual Visions FTP browser allows remote attackers to read directories outside of the document root via a .. dot dot attack...

CVE-2000-0436

Technical details about CVE-2000-0436 are not publicly provided in the supplied documents; no affected versions, root cause, or remediation information are disclosed here. Monitor for updates.

CVE-2000-0174

StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0303

Quake3 Arena is affected by CVE-2000-0303 due to a path traversal (dot dot) vulnerability that enables a malicious server operator to read or modify files on a client. The issue, described in the NVD entry, indicates a network-accessible vector with low attack complexity and no authentication req...

CVE-2000-0261

The AVM KEN! web server allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0660

The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0303

Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot .. attack...

CVE-2000-0638

bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack on the HOSTSVC parameter...

CVE-2000-0640

Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. dot dot attack, which provides different error messages depending on whether the file exists or not...

CVE-2000-0577

Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0565

SmartFTP Daemon 0.2 allows a local user to access arbitrary files by uploading and specifying an alternate user configuration file via a .. dot dot attack...

CVE-1999-0842

Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. dot dot attack...

CVE-1999-0842

CVE-1999-0842 affects the Symantec Mail-Gear 1.0 web interface server. The issue allows remote attackers to read arbitrary files via a .. (dot dot) path traversal, due to improper validation of file paths. The provided documents do not include specific exploit details or a confirmed remediation; ...

CVE-2000-0436

MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. dot dot attack...

CVE-2000-0303

Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot .. attack...

CVE-1999-0897

iChat ROOMS Webserver allows remote attackers to read arbitrary files via a .. dot dot attack...