CVE-2000-0176

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-02/0417.html
http://www.securityfocus.com/bid/1016Exploit, Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-02/0417.html
http://www.securityfocus.com/bid/1016Exploit, Patch, Vendor Advisory

Timeline

Published: Feb 29, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-017710.0DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters.CVE-2000-01787.5ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions.CVE-2000-01795.0HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555.CVE-2000-01805.0Sojourn search engine allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-01815.0Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determine the real IP addres CVE-2000-01825.0iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and ca CVE-2000-01835.1Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability.CVE-2000-01842.1Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer sha CVE-2000-01855.0RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private.CVE-2000-01867.2Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argumen CVE-2000-01877.5EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shel CVE-2000-01887.5EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell