The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote attackers to read arbitrary files from the client by specifying the full pathname for the file.
References
Configurations
History
No history.
Information
Published : 1999-05-01 04:00
Updated : 2024-02-28 10:24
NVD link : CVE-2000-0412
Mitre link : CVE-2000-0412
CVE.ORG link : CVE-2000-0412
JSON object : View
Products Affected
napster
- knapster
CWE