medium6.4Public exploit code
CVE-2000-0381
The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing databa…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Gossamer Threads DBMan 2.0.4 - DBMan Information Leakage2000-05-05 · remote · multiple · Verified
Impact
The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gossamer Threads | Dbman | Version 2.0.4 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-05/0067.html
- http://www.perfectotech.com/blackwatchlabs/vul5_05.html
- http://www.securityfocus.com/bid/1178
- http://archives.neohapsis.com/archives/bugtraq/2000-05/0067.html
- http://www.perfectotech.com/blackwatchlabs/vul5_05.html
- http://www.securityfocus.com/bid/1178