CVE-2000-0521

Savant Web Server - Unauthenticated Source Code Disclosure via Malformed HTTP Request

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2000-0521. PoCs published by Drew.

AI-analyzed exploit summary This exploit demonstrates an information disclosure vulnerability in Savant Web Server by omitting the HTTP version in a GET request, causing the server to return the source code of CGI scripts instead of executing them.

Description

Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include the HTTP version number.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Drew · textremotecgi
https://www.exploit-db.com/exploits/19995

This exploit demonstrates an information disclosure vulnerability in Savant Web Server by omitting the HTTP version in a GET request, causing the server to return the source code of CGI scripts instead of executing them.

Classification
Working Poc 100%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Savant Web Server
No auth needed
Prerequisites: Network access to the target web server · Presence of CGI scripts on the server
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/4616
Patch, Vendor Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2000-05/0469.html
Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/1313

Scores

EPSS 0.0767
EPSS Percentile 93.8%

Details

Status published
Products (1)
michael_lamont/savant_webserver 2.1
Published Jun 05, 2000
Tracked Since Feb 18, 2026