CVE-2001-0086: Medium severity CGI Script Center Subscribe Me LITE vulnerability

Published Feb 2, 2001

Updated

CGI Script Center Subscribe Me LITE 2.0 and earlier allows remote attackers to delete arbitrary mailing list users without authentication by directly calling subscribe.pl with the target address as a parameter.

Affected Software

2 affected components

CGI Script Center Subscribe Me LITE=1.0

CGI Script Center Subscribe Me LITE=2.0

Event History

Feb 2, 2001

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

Who can exploit this issue?

Any remote attacker can exploit it without authentication. The attack only requires direct access to the vulnerable subscribe.pl CGI endpoint.

What capability does an attacker gain?

An attacker can delete arbitrary users from mailing lists by supplying a target email address as a parameter to subscribe.pl.

Which versions are affected?

CGI Script Center Subscribe Me LITE 2.0 and earlier are affected.

CVE-2001-0086: Medium severity CGI Script Center Subscribe Me LITE vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What capability does an attacker gain?

Which versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What capability does an attacker gain?

Which versions are affected?