CVE-2000-0381

Medium

Published: 05/05/2000(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.64%

84th percentile - higher than 84% of all known CVEs

Summary

The db.cgi CGI script in DBMan by Gossamer Threads allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter.

Risk Assessment

Attackers may gain access to sensitive information, potentially leading to further attacks on the system or data exposure.

Recommendation

It is recommended to secure the db.cgi script and restrict access to environmental variables and setup information.

Original NVD description (English source)

The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter.