medium5.0Public exploit code
CVE-2004-1878
LINBOX LIN:BOX allows remote attackers to bypass authentication, obtain sensitive information, or gain access via a direct request to admin/user.pl preceded by…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- LinBit Technologies LINBOX Officeserver - Remote Authentication Bypass2004-03-30 · webapps · cgi · Verified
Impact
LINBOX LIN:BOX allows remote attackers to bypass authentication, obtain sensitive information, or gain access via a direct request to admin/user.pl preceded by // (double leading slash).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linbit Technologies | Linbox Officeserver | All versions |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=108067245401673&w=2
- http://secunia.com/advisories/11264
- http://www.securityfocus.com/bid/10010
- http://www.websec.org/adv/linbit.txt.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15677
- http://marc.info/?l=bugtraq&m=108067245401673&w=2
- http://secunia.com/advisories/11264
- http://www.securityfocus.com/bid/10010
- http://www.websec.org/adv/linbit.txt.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15677