CVE:CVE-2000-0835
CNNVD:CNNVD-200011-032
Sambar Server 4.4 Beta 3版本的search.dll Sambar ISAPI Search功能中存在输入验证漏洞。远程攻击者可通过指定查询参数中的目录读取任意目录。
solution:Upgrade sambar sambar_server to a higher version than 4.3,4.4:beta3,and avoid the version 4.3,4.4:beta3