PT-2000-1705 · Bajie · Bajie Http Web Server

Published 2000-10-20 · Updated 2017-10-10 · CVE-2000-0773

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bajie HTTP web server version 0.30a

Description The issue allows remote attackers to read arbitrary files via a URL that contains a "....", which is a variant of the dot dot directory traversal attack.

Recommendations For Bajie HTTP web server version 0.30a, consider restricting access to sensitive files and directories to minimize the risk of exploitation until a patch is available.

Fix

Related Identifiers

CVE-2000-0773

Affected Products

Bajie Http Web Server

References · 4

• http://archives.neohapsis.com/archives/bugtraq/2000-07/0426.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0773 · Security Note
• http://securityfocus.com/bid/1522 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5021 · Note