CVE-2000-0332

Medium

Published: 03/05/2000(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

3.26%

87th percentile - higher than 87% of all known CVEs

Summary

UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allow remote attackers to read arbitrary files via a pathname string that includes a dot dot (..) and ends with a null byte.

Risk Assessment

An attacker could gain access to sensitive data on the server, potentially leading to serious security breaches for the organization.

Recommendation

It is recommended to update to the latest version of UltraBoard and implement appropriate security measures to block access to CGI scripts.

Original NVD description (English source)

UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a pathname string that includes a dot dot (..) and ends with a null byte.