Patchfirst
CVE-2000-0208 Public exploit EPSS 6.9%

The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch.

Heading is the official description · CVE.org
Breakdown
27.7 / 100
Exploited
Not confirmed
Reports
1
Tactics
0/15

Public exploit code (Exploit-DB) was available 41 days before disclosure.

  1. Public exploit codeExploit-DB41 days before
  2. Disclosedday 0

techniques

No techniques linked

No ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.

What security researchers reported

Named in 1 threat report
1 reportTrustwave

Reports are matched by finding the exact id CVE-2000-0208 in their text; nobody has reviewed the match. One passage is shown per report, at most 320 characters, linked to the original.

References

1 link, grouped by NVD tag
↑ ↓ chooseEnter openEsc close