Lucene search
MitreCVE-2000-0176HistoryMar 22, 2000 - 5:00 a.m.
CVE-2000-0176
2000-03-2205:00:00
mitre
web.nvd.nist.gov
31
cve-2000-0176
vulnerabilities
serv-u 2.5d
infosec
nvd
remote attackers
pathname disclosure
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.7
Confidence
High
EPSS
0.002
Percentile
62.0%
The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist.
Affected configurations
Node
cat_softserv-uMatch2.4
ORcat_softserv-uMatch2.5
ORcat_softserv-uMatch2.5a
ORcat_softserv-uMatch2.5b
ORcat_softserv-uMatch2.5c
ORcat_softserv-uMatch2.5d
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cat_soft | serv-u | 2.4 | cpe:2.3:a:cat_soft:serv-u:2.4:*:*:*:*:*:*:* |
| cat_soft | serv-u | 2.5 | cpe:2.3:a:cat_soft:serv-u:2.5:*:*:*:*:*:*:* |
| cat_soft | serv-u | 2.5a | cpe:2.3:a:cat_soft:serv-u:2.5a:*:*:*:*:*:*:* |
| cat_soft | serv-u | 2.5b | cpe:2.3:a:cat_soft:serv-u:2.5b:*:*:*:*:*:*:* |
| cat_soft | serv-u | 2.5c | cpe:2.3:a:cat_soft:serv-u:2.5c:*:*:*:*:*:*:* |
| cat_soft | serv-u | 2.5d | cpe:2.3:a:cat_soft:serv-u:2.5d:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2000-0176
2000-02-29 05:00:00
cvelist
cvelist
CVE-2000-0176
2000-03-22 05:00:00
nessus
nessus
Serv-U < 2.5e Multiple Vulnerabilities (OF, Path Disc)
2003-03-15 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.7
Confidence
High
EPSS
0.002
Percentile
62.0%
Related for CVE-2000-0176