CVE-2000-0149

Medium

Published: 08/02/2000(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

7.38%

94th percentile - higher than 94% of all known CVEs

The Zeus web server allows remote attackers to view the source code for CGI programs by appending a null character (%00) at the end of a URL.

Attackers may gain access to sensitive information contained in the source code, potentially leading to further attacks on the system.

It is recommended to remove the ability to process null characters in URLs and to update the server to the latest version to minimize risk.

Original NVD description (English source)

Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL.