CVE-2000-0904

Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory in the web document root, which allows remote attackers to obtain that information.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.securityfocus.com/archive/1/79956	Exploit Vendor Advisory
http://www.securityfocus.com/bid/1648	Exploit Vendor Advisory
http://www.securityfocus.com/archive/1/79956	Exploit Vendor Advisory
http://www.securityfocus.com/bid/1648	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:qnx:voyager:2.01b:*:*:*:*:*:*:*

History

23 Sep 2026, 10:10

Type	Values Removed	Values Added
Summary		(es) Servidor web Voyager 2.01B en los discos de demostración para QNX 405 almacena información sensible del cliente web en el directorio .photon en la raíz de documentos web, lo que permite a atacantes remotos obtener esa información.

Information

Published : 2000-12-19 05:00

Updated : 2026-09-23 10:10

NVD link : CVE-2000-0904

Mitre link : CVE-2000-0904

CVE.ORG link : CVE-2000-0904

JSON object : View

Products Affected

qnx

voyager

CWE

NVD-CWE-Other

{"id": "CVE-2000-0904", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2000-12-19T05:00:00.000", "references": [{"url": "http://www.securityfocus.com/archive/1/79956", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/1648", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/79956", "tags": ["Exploit", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/1648", "tags": ["Exploit", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory in the web document root, which allows remote attackers to obtain that information."}, {"lang": "es", "value": "Servidor web Voyager 2.01B en los discos de demostraci\u00f3n para QNX 405 almacena informaci\u00f3n sensible del cliente web en el directorio .photon en la ra\u00edz de documentos web, lo que permite a atacantes remotos obtener esa informaci\u00f3n."}], "lastModified": "2026-09-23T10:10:00.673", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:qnx:voyager:2.01b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8C4C4049-5A12-4FC4-A1DB-B11E3CB25895"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}