VulnerabilityModified
CVE-2001-0276
ext.dll in BadBlue 1.02.07 Personal Edition web server allows remote attackers to determine the physical path of the server by directly calling ext.dll without any arguments, which produces an error message that contains the path.
MEDIUM 6.4EPSS 3.47%
Does this matter?
Lower severity and a low EPSS score (3.47%). Track it; it rarely justifies an emergency change on its own.
Description
ext.dll in BadBlue 1.02.07 Personal Edition web server allows remote attackers to determine the physical path of the server by directly calling ext.dll without any arguments, which produces an error message that contains the path.
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:P
- EPSS
- 3.47% probability · 88th percentile
- CISA KEV
- Not listed
- Affected
- working resources inc./badblue
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=98263019502565&w=2
- http://www.badblue.com/p010219.htm
- http://www.securityfocus.com/bid/2390Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6130
- http://marc.info/?l=bugtraq&m=98263019502565&w=2
- http://www.badblue.com/p010219.htm
- http://www.securityfocus.com/bid/2390Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6130
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.