CVE-2000-0810

HighCVSS 7.5/10Last modified Sep 23, 2026

Description

Auction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows remote attackers to delete arbitrary files and directories via a .. (dot dot) attack.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Dec 19, 2000
Last modified
Sep 23, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-08115.0Auction Weaver 1.0 through 1.04 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the username or bidfile form fiCVE-2000-081210.0The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module CVE-2000-08135.0Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to redirect FTP connections to other servers ("FTP Bounce") via invalidCVE-2000-08162.1Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters.CVE-2000-08177.5Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute arbitrary commands viaCVE-2000-081810.0The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging information to be appenCVE-2000-08247.2The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, whichCVE-2000-08255.0Ipswitch Imail 6.0 allows remote attackers to cause a denial of service via a large number of connections in which a long Host: header is seCVE-2000-082610.0Buffer overflow in ddicgi.exe program in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands viCVE-2000-082710.0Buffer overflow in the web authorization form of Mobius DocumentDirect for the Internet 1.2 allows remote attackers to cause a denial of serCVE-2000-082810.0Buffer overflow in ddicgi.exe in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a longCVE-2000-08292.1The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a denial of service by
CVE-2000-0810: High severity, CVSS 7.5 | Vulnix