CVE-2000-1110: IBM Net.data

Medium severity, CVSS 5.0. EPSS: 2.7% chance of exploitation in the next 30 days.

document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of the web server by sending a nonexistent command to the program.

Affected products

• IBM Net.data: version 7.0 only

Published 2001-01-09. Last modified 2026-06-16.