CVE-2000-0039

Medium

Published: 29/12/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

5.92%

92th percentile - higher than 92% of all known CVEs

The AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program.

Attackers may gain access to sensitive files on the server, potentially leading to data exposure or further attacks on the system.

It is recommended to update the search engine and implement appropriate security measures to block the use of .. sequences in queries.

Original NVD description (English source)

AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program.