medium5.0Public exploit code
CVE-2000-0671
Roxen web server earlier than 2.0.69 allows allows remote attackers to bypass access restrictions, list directory contents, and read source code by inserting a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Roxen WebServer 2.0.x - '%00' Request File/Directory Disclosure2000-07-21 · remote · multiple · Verified
Impact
Roxen web server earlier than 2.0.69 allows allows remote attackers to bypass access restrictions, list directory contents, and read source code by inserting a null character (%00) to the URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Roxen | Webserver | Version 2.0.x |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0307.html
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0321.html
- http://www.securityfocus.com/bid/1510
- https://exchange.xforce.ibmcloud.com/vulnerabilities/4965
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0307.html
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0321.html
- http://www.securityfocus.com/bid/1510
- https://exchange.xforce.ibmcloud.com/vulnerabilities/4965