CVE-2000-0944

CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original password.

• CWE-522

• http://archives.neohapsis.com/archives/bugtraq/2000-10/0402.htmlBroken Link, Vendor Advisory
• http://www.securityfocus.com/bid/1881Broken Link, Exploit, Third Party Advisory, VDB Entry, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5433Third Party Advisory, VDB Entry
• http://archives.neohapsis.com/archives/bugtraq/2000-10/0402.htmlBroken Link, Vendor Advisory
• http://www.securityfocus.com/bid/1881Broken Link, Exploit, Third Party Advisory, VDB Entry, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5433Third Party Advisory, VDB Entry

Published

Dec 19, 2000

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2000-0938Samba Web Administration Tool (SWAT) in Samba 2.0.7 supplies…
• CVE-2000-0939Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows r…
• CVE-2000-0940Directory traversal vulnerability in Metertek pagelog.cgi al…
• CVE-2000-0941Kootenay Web KW Whois 1.0 CGI program allows remote attacker…
• CVE-2000-0942The CiWebHitsFile component in Microsoft Indexing Services f…
• CVE-2000-0943Buffer overflow in bftp daemon (bftpd) 1.0.11 allows remote …
• CVE-2000-0945The web configuration interface for Catalyst 3500 XL switche…
• CVE-2000-0946Compaq Easy Access Keyboard software 1.3 does not properly d…
• CVE-2000-0947Format string vulnerability in cfd daemon in GNU CFEngine be…
• CVE-2000-0948GnoRPM before 0.95 allows local users to modify arbitrary fi…
• CVE-2000-0949Heap overflow in savestr function in LBNL traceroute 1.4a5 a…
• CVE-2000-0950Format string vulnerability in x-gw in TIS Firewall Toolkit …