CVE-2000-0774: Bajie java http server vulnerability

Bajie · Java Http Server

The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root.

5.0 CVSS 2.0 Medium EPSS 1.5% · top 27.2%

5.0CVSS 2.0 base score

1.5%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

4References

16 Jun 2026Last modified by NVD

Description

The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root.

AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Java Http Server Bajie

References

Link	Tags
http://archives.neohapsis.com/archives/bugtraq/2000-07/0426.html	Vendor Advisory
http://www.securityfocus.com/bid/1521	PatchVendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-07/0426.html	Vendor Advisory
http://www.securityfocus.com/bid/1521	PatchVendor Advisory

Track CVE-2000-0774 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2001-0307Bajie java http server code injection vulnerabilityBajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP re…EPSS 7.9%3 May 2001 7.5CVE-2001-0308Bajie java http server code injection vulnerabilityUploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute arbitrary commands by calling t…EPSS 3.7%3 May 2001 5.0CVE-2000-0773Bajie java http server vulnerabilityBajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant of the dot dot directory trav…EPSS 1.9%20 Oct 2000 4.3CVE-2003-1511Bajie java http server cross-site scripting vulnerabilityCross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remote attackers to inject arbitrary web script or HT…EPSS 3.6%31 Dec 2003 4.3CVE-2003-1543Bajie java http server cross-site scripting vulnerabilityCross-site scripting (XSS) vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly others, allows remote attackers to inject arbitrary …EPSS 2.0%31 Dec 2003

Source: NIST National Vulnerability Database (record CVE-2000-0774), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.