VULNERABILITY INTELLIGENCE
CVE-2000-0412
CVSS score7.5 HIGH
EPSS probability2.75%
CISA KEVNot currently listed
Published1999-05-01
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote attackers to read arbitrary files from the client by specifying the full pathname for the file.