CVE-2000-0671

Roxen web server <2.0.69 - Auth Bypass

Title source: llm

Description

Roxen web server earlier than 2.0.69 allows allows remote attackers to bypass access restrictions, list directory contents, and read source code by inserting a null character (%00) to the URL.

Exploits (1)

exploitdb WRITEUP VERIFIED

by zorgon · textremotemultiple

https://www.exploit-db.com/exploits/20104

View Code ZIP pw:eip

References (4)

Core 4

Core References

Third Party Advisory mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2000-07/0307.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/1510

Exploit, Patch, Vendor Advisory mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2000-07/0321.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/4965

Scores

EPSS 0.0510

EPSS Percentile 89.9%

Details

Status published

Products (1)

roxen/webserver 2.0.x

Published Jul 21, 2000

Tracked Since Feb 18, 2026