CVE Catalog

CVE-2000-0213

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
10.00%

95th percentile - higher than 95% of all known CVEs

Summary

The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, allowing remote attackers to execute commands via shell metacharacters.

Risk Assessment

Attackers can exploit this vulnerability to execute commands remotely, potentially leading to server takeover or data leakage.

Recommendation

It is recommended to remove or restrict access to the ECHO.BAT and HELLO.BAT files and review the server configuration to secure against unauthorized access.

Original NVD description (English source)

The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via shell metacharacters.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS