CVE-2000-0412

Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 01/05/1999 Updated: 10/09/2008

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote malicious users to read arbitrary files from the client by specifying the full pathname for the file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
napster knapster napster

source: wwwsecurityfocuscom/bid/1186/info Various open source clones of the Napster software package have a vulnerability by which users may view files on a machine running a vulnerable Napster clone client The file access is limited to files accessible by the user running the client The official commercial version of Napster does not c ...

NVD-CWE-Other http://archives.neohapsis.com/archives/bugtraq/2000-05/0124.html http://archives.neohapsis.com/archives/bugtraq/2000-05/0127.html ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:18-gnapster.adv http://www.securityfocus.com/bid/1186 https://nvd.nist.gov https://www.exploit-db.com/exploits/19905/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2000-0412

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect