CVE-2000-0240

Medium

Published: 21/03/2000(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

7.65%

94th percentile - higher than 94% of all known CVEs

Summary

The vqSoft vqServer program allows remote attackers to read arbitrary files by using a specific string in the URL, which is a variation of a .. (dot dot) attack.

Risk Assessment

Attackers may gain access to sensitive data, potentially leading to serious security breaches within the organization.

Recommendation

It is recommended to update the vqSoft vqServer software to the latest version and implement appropriate security measures against dot dot attacks.

Original NVD description (English source)

vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a .. (dot dot) attack.