CVE-2000-0176 Information disclosure in n/a

Medium 5.0 Published 22 Mar 2000 Updated 8 Aug 2024

Remote attackers can determine the server's real pathname by requesting non-existent URLs in the default configuration of Serv-U.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2000-0176?

CVE-2000-0176 is a medium-severity vulnerability in n/a, published on 22 Mar 2000. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist.

Which versions are affected by CVE-2000-0176?

It affects 1 product.

Products include Cat Soft Serv-U.

How do I fix CVE-2000-0176?

No fix has been published for CVE-2000-0176 yet. Limit exposure of the affected software until one is available.

Is CVE-2000-0176 being exploited?

There is no known exploitation of CVE-2000-0176 in the wild and no public exploit code.

Sources

Also known as GHSA-8585-x3v3-r54f.