Login Request a demo
Unscored severity · published Jun 19, 2000
CVE-2000-0528
Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames for other files
–
CVSS
1.6%
EPSS
No
On KEV
Description
Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames for other files.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NT
Net Tools Pki Server · Network Associates
1.0 · source: NVD
Affected product
NT
Net Tools Pki Server
Network Associates
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2000-0528
CVE.org
https://www.cve.org/CVERecord?id=CVE-2000-0528
Patch
http://archives.neohapsis.com/archives/bugtraq/2000-06/0166.html
www.osvdb.org
http://www.osvdb.org/4353
Patch
http://www.securityfocus.com/bid/1364
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/4743
More from Net Tools Pki Server
–
CVE-2000-0739
Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbitrary files via a
–
CVE-2000-0740
Buffer overflow in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary commands via a long URL in the HTTPS port
–
CVE-2000-0741
Format string vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary code via format strings in a URL…
–
CVE-2000-0529
Net Tools PKI Server allows remote attackers to cause a denial of service via a long HTTP request