SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published: 2000-10-13T04:00:00
Updated: 2024-08-08T05:21:31.286Z
Reserved: 2000-07-19T00:00:00
Link: CVE-2000-0588

No data.

Status : Modified
Published: 2000-06-26T04:00:00.000
Modified: 2024-11-20T23:32:50.540
Link: CVE-2000-0588

No data.