CVE Vulnerabilities

CVE-2000-0208

Published: Feb 29, 2000 | Modified: Sep 10, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch.

Affected Software

Name Vendor Start Version End Version
Htdig Htdig 3.2.0b1 3.2.0b1
Htdig Htdig 3.1.4 3.1.4
Htdig Htdig 3.1.3 3.1.3
Htdig Htdig 3.1.1 3.1.1
Htdig Htdig 3.1.2 3.1.2

References