National Vulnerability Database (CVE-2000-0921)

National Cyber-Alert System Vulnerability Summary: CVE-2000-0921
Orirignal release date: 2000-12-19 Source: US-CERT/NIST ### Overview Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter. ### Impact CVSS Severity: 3.3 (Low) Range: remote Authentication: input Impact Type: conf ### Reference to Advisories, Solutions, and Tools External Source: ISS X-Force Name: XF:hassan-shopping-cart-dir-traversal Hyperlink: http://xforce.iss.net/static/5342.php External Source: Security Focus Name: BID 1777 Hyperlink: http://www.securityfocus.com/bid/1777 ### Vulnerable Software and Vendor Shopping Cart (Hassan Consulting) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0921