Vulnerability in Netscape Communicator

CVE-1999-0174

The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.

EPSS: 0.069 (93.4th percentile) — read the EPSS interpretation.

Affected products

Netscape Communicator — versions 4.0, 4.05, 4.5
N/a — versions n/a

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

cve@mitre.org (x_refsource_MISC)

Frequently asked questions

What is CVE-1999-0174?: CVE-1999-0174 is a vulnerability in Netscape Communicator. Published 1997-02-01.
Is CVE-1999-0174 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.