CVE-2000-0588: Sawmill

Medium severity, CVSS 5.0. EPSS: 7.5% chance of exploitation in the next 30 days.

SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands.

Affected products

• Sawmill Sawmill: version 5.0.21 only

Published 2000-06-26. Last modified 2026-06-16.