CVE-2000-1196

PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 allows remote attackers to read arbitrary files by specifying the target file in the errPagePath parameter.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2001-08-31

Last modified

2024-08-08

Affected products

• Publishingxpert (Netscape)

References

• http://docs.iplanet.com/docs/manuals/pubx/2.5.2_Relnotes.html
• http://packetstormsecurity.org/0004-exploits/ooo1.txt
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7362