PT-2000-1706 · Bajie · Bajie Http Web Server

Published 2000-10-20 · Updated 2008-09-05 · CVE-2000-0774

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bajie HTTP web server version 0.30a

Description The issue concerns a Java servlet named "test" in the Bajie HTTP web server, which discloses the real pathname of the web document root.

Recommendations For Bajie HTTP web server version 0.30a, consider removing or restricting access to the "test" Java servlet to prevent the disclosure of sensitive path information.

Fix

Related Identifiers

CVE-2000-0774

Affected Products

Bajie Http Web Server

References · 3

• http://securityfocus.com/bid/1521 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0774 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2000-07/0426.html · Vendor Advisory