CVE-2000-0696
First published: Thu Sep 21 2000(Updated: )
The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sun Solaris Answerbook2 | =1.4 | |
| Sun Solaris Answerbook2 | =1.4.1 | |
| Sun Solaris Answerbook2 | =1.4.2 | |
| Sun Solaris Answerbook2 | =1.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-historical
- collector/nvd-index
- agent/author
- agent/references
- agent/weakness
- agent/severity
- agent/type
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/event
- agent/remedy
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/sun
- canonical/sun solaris answerbook2
- version/sun solaris answerbook2/1.4
- version/sun solaris answerbook2/1.4.1
- version/sun solaris answerbook2/1.4.2
- version/sun solaris answerbook2/1.3