CVE-2000-0696
Last modified
CVE-2000-0696 is a vulnerability of currently unknown severity. The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script.. EPSS estimates a 7.18% chance of exploitation in the next 30 days.
Description
The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sun | Solaris Answerbook2 | 1.3 |
| Sun | Solaris Answerbook2 | 1.4 |
| Sun | Solaris Answerbook2 | 1.4.1 |
| Sun | Solaris Answerbook2 | 1.4.2 |
References
- http://archives.neohapsis.com/archives/sun/2000-q3/0001.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/1554Exploit, Patch, Vendor Advisory
- http://archives.neohapsis.com/archives/sun/2000-q3/0001.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/1554Exploit, Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2000-0696?
How severe is CVE-2000-0696?
How do I fix CVE-2000-0696?
Are you affected by CVE-2000-0696?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
