CVE-2000-0240

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a .. (dot dot) attack.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Mar 21, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-02415.0vqSoft vqServer stores sensitive information such as passwords in cleartext in the server.cfg file, which allows attackers to gain privilegeCVE-2000-02425.0WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters.CVE-2000-02435.0AnalogX SimpleServer:WWW HTTP server 1.03 allows remote attackers to cause a denial of service via a short GET request to cgi-bin.CVE-2000-024410.0The Citrix ICA (Independent Computing Architecture) protocol uses weak encryption (XOR) for user authentication.CVE-2000-024510.0Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts.CVE-2000-02465.0IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote atCVE-2000-02477.2Unknown vulnerability in Generic-NQS (GNQS) allows local users to gain root privileges.CVE-2000-024810.0The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attaCVE-2000-02497.2The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrlCVE-2000-02507.2The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords.CVE-2000-02515.0HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addresses.CVE-2000-02525.0The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable.
CVE-2000-0240: Medium severity, CVSS 5.0 | Vulnix