Exploitation Summary
EIP tracks 1 public exploit for CVE-2000-0174. PoCs published by Vanja Hrustic.
AI-analyzed exploit summary This exploit leverages a directory traversal vulnerability in StarScheduler's webserver to access arbitrary files on the system, including sensitive files like /etc/shadow. The server runs as root by default, amplifying the impact.
Description
StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Vanja Hrustic · textremoteunix
https://www.exploit-db.com/exploits/19797
This exploit leverages a directory traversal vulnerability in StarScheduler's webserver to access arbitrary files on the system, including sensitive files like /etc/shadow. The server runs as root by default, amplifying the impact.
Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target:
StarOffice StarScheduler (version not specified)
No auth needed
Prerequisites:
Network access to the StarScheduler server on port 801
MITRE ATT&CK
mistral-large-3 · analyzed Feb 16, 2026
Full analysis →
References (2)
Core 2
Core References
Third Party Advisory mailing-list
x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2000-03/0063.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/1040
Scores
EPSS
0.0592
EPSS Percentile
92.4%
Details
Status
published
Products (1)
sun/staroffice
5.1
Published
Mar 09, 2000
Tracked Since
Feb 18, 2026