20001009 Master Index traverse advisorymailing list
http://archives.neohapsis.com/archives/bugtraq/2000-10/0141.html CVE-2000-0924
Armada Design Master Index 1.0 - Directory Traversal
Record summary
CVE-2000-0924 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
Directory traversal vulnerability in search.cgi CGI script in Armada Master Index allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catigory" parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBArmada Design Master Index 1.0 - Directory TraversalExploitDB exploitby pestilenceNot analyzed1 file
References
5461vdb entry
http://www.osvdb.org/461 1772vdb entry
http://www.securityfocus.com/bid/1772 master-index-directory-traversal(5355)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/5355 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2000-0924