{"id":"CVE-2000-0588","aliases":["EUVD-2000-0584","GHSA-cvw6-7vx8-mh9x"],"status":"published","title":"SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by...","description":"SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.07488,"percentile":0.94519,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-200"],"published":"2000-06-26T04:00:00Z","modified":"2026-06-16T21:52:03Z","exploits":[{"source":"exploitdb","id":"EDB-20041","title":"Flowerfire Sawmill 5.0.21 - File Access","type":"remote","platform":"cgi","date":"2000-06-26","verified":true,"url":"https://www.exploit-db.com/exploits/20041"}],"products":[{"vendor":"sawmill","product":"sawmill"}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0080.html","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0271.html","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1402","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2000-0588"},{"url":"https://github.com/advisories/GHSA-cvw6-7vx8-mh9x"}],"sources":{"cve":[{"id":"CVE-2000-0588","description":"SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands.","status":"published","published":"2000-10-13T04:00:00Z","modified":"2024-08-08T05:21:31.286Z","updated_at":"2026-11-02T14:33:41.23606Z"}],"euvd":[{"id":"EUVD-2000-0584","description":"SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands.","status":"published","published":"2000-10-13T04:00:00Z","modified":"2024-08-08T05:21:31Z","updated_at":"2026-11-03T00:56:24.66443Z"}],"ghsa":[{"id":"GHSA-cvw6-7vx8-mh9x","title":"SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by...","description":"SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands.","status":"published","published":"2022-04-30T18:13:55Z","modified":"2023-01-30T05:05:03Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:47:10.981212Z"}],"nvd":[{"id":"CVE-2000-0588","description":"SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands.","status":"published","published":"2000-06-26T04:00:00Z","modified":"2026-06-16T21:52:03.573Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T13:59:02.365657Z"}]}}