CVE-2000-0208

Medium

Published: 29/02/2000(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

5.84%

92th percentile - higher than 92% of all known CVEs

Summary

The htsearch CGI program in htdig (ht://Dig) allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch.

Risk Assessment

Attackers may gain access to sensitive information stored in files on the server, potentially leading to serious security breaches.

Recommendation

It is recommended to update htdig to the latest version and restrict access to the htsearch program to prevent unauthorized file reading.

Original NVD description (English source)

The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch.