medium5.0Public exploit code
CVE-2000-0208
The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsear…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- The ht://Dig Group ht://Dig 3.1.1/3.1.2/3.1.3/3.1.4/3.2 .0b1 - Arbitrary File Inclusion2000-02-29 · remote · unix · Verified
Impact
The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Htdig | Htdig | Versions 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.2.0b1 |