Unscored severity · published Oct 20, 2000
CVE-2000-0739
Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbitrary files via a
–
CVSS
2.9%
EPSS
No
On KEV
Description
Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTPS request to the enrollment server.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NT
Net Tools Pki Server · Network Associates
1.0; 1.0hotfix1; 1.0hotfix2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2000-0739
CVE.org
https://www.cve.org/CVERecord?id=CVE-2000-0739
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-07/0473.html
download.nai.com
http://download.nai.com/products/licensed/pgp/hf3pki10.txt
www.osvdb.org
http://www.osvdb.org/1489
Exploit
http://www.securityfocus.com/bid/1537
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/5066
More from Net Tools Pki Server
–
CVE-2000-0740
Buffer overflow in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary commands via a long URL in the HTTPS port
–
CVE-2000-0741
Format string vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary code via format strings in a URL…
–
CVE-2000-0528
Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames for other files
–
CVE-2000-0529
Net Tools PKI Server allows remote attackers to cause a denial of service via a long HTTP request