CVE-2000-0671

Roxen web server <2.0.69 - Auth Bypass

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2000-0671. PoCs published by zorgon.

AI-analyzed exploit summary This is a writeup describing a directory traversal and information disclosure vulnerability in Roxen Web Server. The vulnerability allows an attacker to retrieve directory contents and source code of unparsed scripts by appending a null character (%00) to the URL.

Description

Roxen web server earlier than 2.0.69 allows allows remote attackers to bypass access restrictions, list directory contents, and read source code by inserting a null character (%00) to the URL.

Exploits (1)

exploitdb WRITEUP VERIFIED
by zorgon · textremotemultiple
https://www.exploit-db.com/exploits/20104

This is a writeup describing a directory traversal and information disclosure vulnerability in Roxen Web Server. The vulnerability allows an attacker to retrieve directory contents and source code of unparsed scripts by appending a null character (%00) to the URL.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Roxen WebServer 2.0 prior to 2.0.69
No auth needed
Prerequisites: Network access to the target server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Third Party Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2000-07/0307.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/1510
Exploit, Patch, Vendor Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2000-07/0321.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/4965

Scores

EPSS 0.0786
EPSS Percentile 94.0%

Details

Status published
Products (1)
roxen/webserver 2.0.x
Published Jul 21, 2000
Tracked Since Feb 18, 2026