VulnerabilityModified
CVE-2000-0977
mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file name in the "filename" parameter in a POST request, which is then sent by email to the address specified in the "email" parameter.
MEDIUM 5.0EPSS 8.60%
Does this matter?
Lower severity and a low EPSS score (8.60%). Track it; it rarely justifies an emergency change on its own.
Description
mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file name in the "filename" parameter in a POST request, which is then sent by email to the address specified in the "email" parameter.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 8.60% probability · 95th percentile
- CISA KEV
- Not listed
- Affected
- oatmeal studios/mail file
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0172.htmlExploit, Vendor Advisory
- http://www.securityfocus.com/bid/1807Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5358
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0172.htmlExploit, Vendor Advisory
- http://www.securityfocus.com/bid/1807Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5358
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.