CVE-2000-0039

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• AltaVista Search Intranet 2.0 b/2.3 - Directory Traversal1999-12-29 · remote · unix · Verified

Impact

AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program.

Affected products

References

• NVD record
• CVE.org record
• http://www.osvdb.org/15
• http://www.securityfocus.com/bid/896
• http://www.osvdb.org/15
• http://www.securityfocus.com/bid/896