CVE-2000-0208: Htdig

Medium severity, CVSS 5.0. EPSS: 6.9% chance of exploitation in the next 30 days.

The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch.

Affected products

• Htdig Htdig: version 3.1.1 only; version 3.1.2 only; version 3.1.3 only; version 3.1.4 only; version 3.2.0b1 only

Published 2000-02-29. Last modified 2026-06-16.