CVE-2000-0208

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Feb 29, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-02097.6Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a malicious web page.CVE-2000-02101.2The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files.CVE-2000-02115.0The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an i CVE-2000-02125.0InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client configuration informatio CVE-2000-02135.0The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via she CVE-2000-02144.6FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites.CVE-2000-02157.2Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges.CVE-2000-02165.0Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which c CVE-2000-02175.1The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious x CVE-2000-02187.2Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname.CVE-2000-02197.2Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt.CVE-2000-02205.0ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an e