CyberSec.Space Logo
Back to CVE Browser

CVE-2000-0149

MEDIUM
5.0
CVSS Severity Score
EPSS Score0.0610%
EPSS Percentile37.98th
PublishedFeb 8, 2000
Last ModifiedApr 16, 2026

Vulnerability Description

Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL.

Affected Platforms (CPE)

📦
Zeus Technologies

Zeus Web Server

= 3.1.1
📦
Zeus Technologies

Zeus Web Server

= 3.1.2
📦
Zeus Technologies

Zeus Web Server

= 3.1.3
📦
Zeus Technologies

Zeus Web Server

= 3.1.4
📦
Zeus Technologies

Zeus Web Server

= 3.1.5
📦
Zeus Technologies

Zeus Web Server

= 3.1.6
📦
Zeus Technologies

Zeus Web Server

= 3.1.7
📦
Zeus Technologies

Zeus Web Server

= 3.1.8
📦
Zeus Technologies

Zeus Web Server

= 3.1.9
📦
Zeus Technologies

Zeus Web Server

= 3.3
📦
Zeus Technologies

Zeus Web Server

= 3.3.1
📦
Zeus Technologies

Zeus Web Server

= 3.3.2
📦
Zeus Technologies

Zeus Web Server

= 3.3.3
📦
Zeus Technologies

Zeus Web Server

= 3.3.4
📦
Zeus Technologies

Zeus Web Server

= 3.3.5

References & Advisories

🔗 http://archives.neohapsis.com/archives/bugtraq/2000-02/0057.html
🔗 http://www.osvdb.org/254
🔗 http://www.securityfocus.com/bid/977
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/3982
🔗 http://archives.neohapsis.com/archives/bugtraq/2000-02/0057.html
🔗 http://www.osvdb.org/254
🔗 http://www.securityfocus.com/bid/977
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/3982

Related Vulnerabilities

CVE-1999-088310.0

Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine.

CVE-2010-035910.0

Buffer overflow in the SSLv2 support in Zeus Web Server before 4.3r5 allows remote attackers to cause a denial of service (daemon ...

CVE-1999-08845.0

The Zeus web server administrative interface uses weak encryption for its passwords.

CVE-2010-03625.0

Zeus Web Server before 4.3r5 does not use random transaction IDs for DNS requests, which makes it easier for remote attackers to s...