CVE Catalog

CVE-2000-0521

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
7.67%

94th percentile - higher than 94% of all known CVEs

Summary

Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include the HTTP version number.

Risk Assessment

Attackers may gain access to sensitive information contained in CGI scripts, potentially leading to further attacks on the system.

Recommendation

It is recommended to update the Savant server to the latest version and configure it to require the HTTP version number in requests.

Original NVD description (English source)

Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include the HTTP version number.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS