Lucene search
HistoryNov 14, 2000 - 5:00 a.m.
CVE-2000-0876
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.6 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.9%
WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the full pathname of the server via a “%C” command, which generates an error message that includes the pathname.
Affected configurations
Node
texas_imperial_softwarewftpdMatch2.4.1
ORtexas_imperial_softwarewftpdMatch2.4.1_rc11
ORtexas_imperial_softwarewftpdMatch2.4.1_rc12
ORtexas_imperial_softwarewftpdMatch2.34
ORtexas_imperial_softwarewftpdMatch2.40
ORtexas_imperial_softwarewftpd_proMatch2.41_rc12
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.6 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.9%
Related for NVD:CVE-2000-0876