PT-2000-1524 · Poll It · Poll It

Published 2000-07-04 · Updated 2017-10-10 · CVE-2000-0590

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Poll It version 2.0

Description The issue allows remote attackers to read arbitrary files by specifying the file name in the data dir parameter.

Recommendations For version 2.0, restrict access to the data dir parameter to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2000-0590

Affected Products

Poll It

References · 5

• 🔥 https://exploit-db.com/exploits/20059 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0590 · Security Note
• http://securityfocus.com/bid/1431 · Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2000-07/0076.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/4878 · Note