CVE-2000-0811

MediumCVSS 5.0/10Last modified Sep 23, 2026

Description

Auction Weaver 1.0 through 1.04 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the username or bidfile form fields.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Dec 19, 2000
Last modified
Sep 23, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-081210.0The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module CVE-2000-08135.0Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to redirect FTP connections to other servers ("FTP Bounce") via invalidCVE-2000-08162.1Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters.CVE-2000-08177.5Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute arbitrary commands viaCVE-2000-081810.0The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging information to be appenCVE-2000-08247.2The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, whichCVE-2000-08255.0Ipswitch Imail 6.0 allows remote attackers to cause a denial of service via a large number of connections in which a long Host: header is seCVE-2000-082610.0Buffer overflow in ddicgi.exe program in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands viCVE-2000-082710.0Buffer overflow in the web authorization form of Mobius DocumentDirect for the Internet 1.2 allows remote attackers to cause a denial of serCVE-2000-082810.0Buffer overflow in ddicgi.exe in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a longCVE-2000-08292.1The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a denial of service byCVE-2000-08305.0annclist.exe in webTV for Windows allows remote attackers to cause a denial of service by via a large, malformed UDP packet to ports 22701 t
CVE-2000-0811: Medium severity, CVSS 5.0 | Vulnix