medium5.0Public exploit code
CVE-2000-0588
SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Flowerfire Sawmill 5.0.21 - File Access2000-06-26 · remote · cgi · Verified
Impact
SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sawmill | Sawmill | Version 5.0.21 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-06/0271.html
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0080.html
- http://www.securityfocus.com/bid/1402
- http://archives.neohapsis.com/archives/bugtraq/2000-06/0271.html
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0080.html
- http://www.securityfocus.com/bid/1402