CVE-2000-0774

The CVE-2000-0774 entry concerns Bajie HTTP web server 0.30a, where the sample Java servlet “test” discloses the real pathname of the web document root. The vulnerability is an information disclosure in which an ordinary request to the test servlet reveals server-side directory paths. The connect...

CVE-2000-0773

Summary: Bajie HTTP web server 0.30a contains a path traversal vulnerability that allows a remote attacker to read arbitrary files by using a URL containing a dot-dot sequence ("...."). The root cause is insufficient validation of path components in the HTTP request, resulting in potential partia...