CVE-2000-0944: Critical severity CGI Script Center News Update vulnerability

Published Dec 19, 2000

Updated

CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original password.

Affected Software

2 affected components

CGI Script Center News Update=1.1

Event History

Dec 19, 2000

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

DescriptionSeverityWeaknessAffected Software

Jan 22, 2001

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What does an attacker need to exploit this issue?

An attacker can exploit the password-change operation remotely without knowing the existing news administration password. The supplied vector indicates network access, low attack complexity, and no authentication requirement.

What is the likely impact if exploitation succeeds?

The attacker can modify the news administration password, potentially taking control of the administration function. The provided impact ratings indicate compromise of confidentiality, integrity, and availability.

CVE-2000-0944: Critical severity CGI Script Center News Update vulnerability

Affected Software

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the likely impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the likely impact if exploitation succeeds?