Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 23/02/2000 Updated: 07/11/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote malicious users to execute commands via shell metacharacters.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sambar sambar server

source: wwwsecurityfocuscom/bid/1002/info The Sambar Web/FTP/Proxy Server for Windows NT and 2000 supports DOS-style batch programs as CGI scripts A remote attacker can use any batch file used by the server in the 'cgi-bin' directory to run any valid command-line program with administrator privileges This allows the attacker to read, mo ...

NVD-CWE-Other http://www.sambar.com/session/highlight?url=/syshelp/history.htm&words=security+&color=red http://www.securityfocus.com/bid/1002 http://www.securityfocus.com/templates/archive.pike?list=1&msg=38B3E60A.6A84FEC3%40cybcom.net https://nvd.nist.gov https://www.exploit-db.com/exploits/19761/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2000-0213

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect