Lucene search

[email protected]CVE-2000-1118

HistoryJan 09, 2001 - 5:00 a.m.

CVE-2000-1118

2001-01-0905:00:00

[email protected]

web.nvd.nist.gov

cve-2000-1118

24link

web server

remote attack

access restrictions

http get

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.003

Percentile

65.4%

JSON

24Link 1.06 web server allows remote attackers to bypass access restrictions by prepending strings such as “/+/” or “/.” to the HTTP GET request.

Affected configurations

NVD

Node

24link24linkMatch1.06

VendorProductVersionCPE
24link24link1.06cpe:/a:24link:24link:1.06:::

Vendor	Product	Version	CPE
24link	24link	1.06	cpe:/a:24link:24link:1.06:::

References

archives.neohapsis.com/archives/bugtraq/2000-11/0369.html

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.003

Percentile

65.4%

JSON

Related for CVE-2000-1118

nvd1 cvelist1