CVE-2000-0436

MetaProducts Offline Explorer <1.2 - Path Traversal

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2000-0436. PoCs published by Wyzewun.

AI-analyzed exploit summary The exploit demonstrates a directory traversal vulnerability in MetaProducts Offline Explorer, allowing unauthorized access to files on the system via a crafted GET request. The vulnerability is exploited by sending a request with '../..\' to traverse directories and access files without authentication.

Description

MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) attack.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Wyzewun · textremotemultiple
https://www.exploit-db.com/exploits/19945

The exploit demonstrates a directory traversal vulnerability in MetaProducts Offline Explorer, allowing unauthorized access to files on the system via a crafted GET request. The vulnerability is exploited by sending a request with '../..\' to traverse directories and access files without authentication.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: MetaProducts Offline Explorer
No auth needed
Prerequisites: Target system running MetaProducts Offline Explorer with default port 800 open
mistral-large-3 · analyzed Feb 18, 2026 Full analysis →

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/1231
Patch x_refsource_confirm
http://www.metaproducts.com/mpOE-HY.html
Third Party Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2000-05/0254.html

Scores

EPSS 0.0712
EPSS Percentile 93.5%

Details

Status published
Products (3)
metaproducts/offline_explorer 1.0
metaproducts/offline_explorer 1.1
metaproducts/offline_explorer 1.2
Published May 19, 2000
Tracked Since Feb 18, 2026