CVE-2000-0588
SawMill 5.0.21 - Unauthenticated Arbitrary File Read via rfcf Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2000-0588. PoCs published by Larry W. Cashdollar.
AI-analyzed exploit summary This exploit leverages a path traversal vulnerability in Sawmill to disclose the first line of any world-readable file by crafting a malicious HTTP request. The vulnerability allows unauthorized access to sensitive information such as /etc/passwd.
Description
SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands.
Exploits (1)
This exploit leverages a path traversal vulnerability in Sawmill to disclose the first line of any world-readable file by crafting a malicious HTTP request. The vulnerability allows unauthorized access to sensitive information such as /etc/passwd.