6.4med
CVE-2001-02761 exploit
ext.dll in BadBlue 1.02.07 Personal Edition web server allows remote attackers to determine the physical path of the server by directly cal…
Published 25 y ago · modified 4 mo ago · JSON
CVSS
6.4
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.5%
percentile 89%
Public exploits
1
Exploit-DB
Summary
ext.dll in BadBlue 1.02.07 Personal Edition web server allows remote attackers to determine the physical path of the server by directly calling ext.dll without any arguments, which produces an error message that contains the path.
Exploit prediction (EPSS)
3.47% probability of exploitation in the next 30 days, higher than 89% of all scored CVEs.
Exploits and detections
- EDB-20640 Working Resources BadBlue 1.2.7 - Full Path Disclosure · remote · 2001-02-20
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 6.4 | AV:N/AC:L/Au:N/C:P/I:N/A:P |
References
- marc.info /?l=bugtraq&m=98263019502565&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
- securityfocus.com /bid/2390 · vdb-entry, x_refsource_BID, x_transferred
- badblue.com /p010219.htm · x_refsource_CONFIRM, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/6130 · vdb-entry, x_refsource_XF, x_transferred
Sources
- CVE List: CVE-2001-0276
- NVD: CVE-2001-0276
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.