CVE-2000-0412
CVSS 2.0 Score 7.5 of 10 (high)
Details
Published May 1, 1999
Updated: Nov 20, 2024
Summary
CVE-2000-0412 is a vulnerability affecting the gnapster and knapster clients for Napster. This issue allows remote attackers to read arbitrary files on the client's system by manipulating the file pathname, as the clients fail to properly restrict access only to MP3 files. This vulnerability poses a significant security risk, as an attacker could potentially access sensitive data or execute malicious code. Users of these Napster clients are urged to update or patch their software to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Napster