Vulnerability Database

300,830

Total vulnerabilities in the database

CVE-2000-0176

The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist.

  • Published: Feb 29, 2000
  • Updated: Nov 9, 2025
  • CVE: CVE-2000-0176
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
cat_soft / serv-u 2.4 2.4.x
cat_soft / serv-u 2.5b 2.5b.x
cat_soft / serv-u 2.5c 2.5c.x
cat_soft / serv-u 2.5 2.5.x
cat_soft / serv-u 2.5d 2.5d.x
cat_soft / serv-u 2.5a 2.5a.x