CVE-2000-1196

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 allows remote attackers to read arbitrary files by specifying the target file in the errPagePath parameter.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://docs.iplanet.com/docs/manuals/pubx/2.5.2_Relnotes.htmlPatch, Vendor Advisory
http://packetstormsecurity.org/0004-exploits/ooo1.txtExploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7362
http://docs.iplanet.com/docs/manuals/pubx/2.5.2_Relnotes.htmlPatch, Vendor Advisory
http://packetstormsecurity.org/0004-exploits/ooo1.txtExploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7362

Timeline

Published: Aug 31, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-11972.1POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names, which CVE-2000-11985.5qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of CVE-2000-11994.6PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges to CVE-2000-12005.0Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy funct CVE-2000-12015.0Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 264.CVE-2000-12027.2ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's di CVE-2000-12035.0Lotus Domino SMTP server 4.63 through 5.08 allows remote attackers to cause a denial of service (CPU consumption) by forging an email messag CVE-2000-12045.0Vulnerability in the mod_vhost_alias virtual hosting module for Apache 1.3.9, 1.3.11 and 1.3.12 allows remote attackers to obtain the source CVE-2000-12054.3Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via CVE-2000-12065.0Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_alias in Apache 1.3.9,CVE-2000-12077.2userhelper in the usermode package on Red Hat Linux executes non-setuid programs as root, which does not activate the security measures in g CVE-2000-12087.2Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges