Vulnerability in Htdig

CVE-2000-0208

The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch.

EPSS: 0.069 (93.4th percentile) — read the EPSS interpretation.

Affected products

  • Htdig — versions 3.1.1, 3.1.2, 3.1.3
  • N/a — versions n/a

References