Exploitation Summary
EIP tracks 1 public exploit for CVE-2000-0634. PoCs published by S21Sec.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in CommuniGate Pro 3.2.4, allowing arbitrary file reads via a crafted HTTP GET request. The PoC retrieves the postmaster configuration file, which contains sensitive information like passwords, potentially enabling further exploitation.
Description
The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in CommuniGate Pro 3.2.4, allowing arbitrary file reads via a crafted HTTP GET request. The PoC retrieves the postmaster configuration file, which contains sensitive information like passwords, potentially enabling further exploitation.