CVE-2000-0588

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-200

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jun 26, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-05897.5SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modify the SawMill configuCVE-2000-05907.5Poll It 2.0 CGI script allows remote attackers to read arbitrary files by specifying the file name in the data_dir parameter.CVE-2000-05915.0Novell BorderManager 3.0 and 3.5 allows remote attackers to bypass URL filtering by encoding characters in the requested URL.CVE-2000-05927.5Buffer overflows in POP3 service in WinProxy 2.0 and 2.0.1 allow remote attackers to execute arbitrary commands via long USER, PASS, LIST, RCVE-2000-05935.0WinProxy 2.0 and 2.0.1 allows remote attackers to cause a denial of service by sending an HTTP GET request without listing an HTTP version nCVE-2000-05945.0BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an inCVE-2000-05954.6libedit searches for the .editrc file in the current directory instead of the user's home directory, which may allow local users to execute CVE-2000-05967.5Internet Explorer 5.x does not warn a user before opening a Microsoft Access database file that is referenced within ActiveX OBJECT tags in CVE-2000-05977.5Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force InteCVE-2000-05985.0Fortech Proxy+ allows remote attackers to bypass access restrictions for to the administration service by redirecting their connections throCVE-2000-05997.5Buffer overflow in iMesh 1.02 allows remote attackers to execute arbitrary commands via a long string to the iMesh port.CVE-2000-06007.5Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed
CVE-2000-0588: Medium severity, CVSS 5.0 | Vulnix