20000802 NAI Net Tools PKI Server vulnerabilitiesmailing list
http://archives.neohapsis.com/archives/bugtraq/2000-07/0473.html CVE-2000-0739
nai net tools pki server 1.0 - Directory Traversal
Record summary
CVE-2000-0739 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTPS request to the enrollment server.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBnai net tools pki server 1.0 - Directory TraversalExploitDB exploitby Juliano RizzoNot analyzed1 file
References
6download.nai.comConfirmation
http://download.nai.com/products/licensed/pgp/hf3pki10.txt 1489vdb entry
http://www.osvdb.org/1489 1537vdb entry
http://www.securityfocus.com/bid/1537 nettools-pki-dir-traverse(5066)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/5066 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2000-0739