CVEvulnerability

CVE-2000-0412

7.5 HIGH Published 1999-05-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
1999-05-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote attackers to read arbitrary files from the client by specifying the full pathname for the file.

Affected configurations

• napster knapster napster

References