CVE-2000-0208

The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2000-02-29

Last modified

2024-08-08

Affected products

• Htdig (Htdig)

References

• http://www.securityfocus.com/bid/1026