high7.5Public exploit code
CVE-2000-0689
Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Acc…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CGI Script Center Account Manager 1.0 LITE / PRO - Administrative Password Alteration (2)2000-08-23 · remote · cgi · Verified
- CGI Script Center Account Manager 1.0 LITE / PRO - Administrative Password Alteration (1)2000-08-23 · remote · cgi · Verified
Impact
Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the amadmin.pl script with the setpasswd parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cgi Script Center | Account Manager | Versions lite_1.0, pro_1.0 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-08/0291.html
- http://www.cgiscriptcenter.com/acctlite/
- http://www.osvdb.org/13341
- http://www.securityfocus.com/bid/1604
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5125
- http://archives.neohapsis.com/archives/bugtraq/2000-08/0291.html
- http://www.cgiscriptcenter.com/acctlite/
- http://www.osvdb.org/13341
- http://www.securityfocus.com/bid/1604
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5125