CVE-2000-0412 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 2.7% (pctl 86)
Patch early
A public exploit exists.
Description
The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote attackers to read arbitrary files from the client by specifying the full pathname for the file.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 2.75% — more likely to be exploited than 86% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 1999-05-01 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| napster | knapster |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | John Donoghue Knapster 0.9/1.3.8 - File Access | 2000-05-13 |
References
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:18-gnapster.adv
- http://archives.neohapsis.com/archives/bugtraq/2000-05/0124.html
- http://archives.neohapsis.com/archives/bugtraq/2000-05/0127.html
- http://www.securityfocus.com/bid/1186
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:18-gnapster.adv
- http://archives.neohapsis.com/archives/bugtraq/2000-05/0124.html
- http://archives.neohapsis.com/archives/bugtraq/2000-05/0127.html
- http://www.securityfocus.com/bid/1186
→ the Explorer · watch your stack · NVD