CVE Catalog
CVE-2000-0176
MediumExploitation Probability (EPSS)
High risk2.08%
79th percentile - higher than 79% of all known CVEs
Summary
The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist.
Risk Assessment
Attackers may gain information about the server's filesystem structure, potentially leading to further attacks on the infrastructure.
Recommendation
It is recommended to upgrade to a newer version of the software and review the server configuration to minimize the risk of information disclosure.
Original NVD description (English source)
The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist.