CVE-2000-0696 | BDVDB-2026-1387 Detail

Description#

The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.s21sec.com/en/avisos/s21sec-004-en.txt
http://www.securityfocus.com/bid/1554
http://archives.neohapsis.com/archives/sun/2000-q3/0001.html
http://seclists.org/bugtraq/2000/Aug/0105.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/5069

Exploit#

No public exploit known

History#

Version 12000-09-21Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.