CVE Catalog
CVE-2000-0063
MediumExploitation Probability (EPSS)
Elevated risk1.36%
68th percentile - higher than 68% of all known CVEs
Summary
The cgiproc CGI script in the Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the filename in a parameter to the script.
Risk Assessment
Attackers may gain access to sensitive data, potentially leading to a breach of confidentiality within the organization.
Recommendation
It is recommended to update the HTTP server to the latest version and restrict access to the cgiproc script.
Original NVD description (English source)
cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the filename in a parameter to the script.