The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2000-09-21T04:00:00
Updated: 2024-08-08T05:28:41.103Z
Reserved: 2000-09-19T00:00:00
Link: CVE-2000-0696
Vulnrichment
No data.
NVD
Status : Modified
Published: 2000-10-20T04:00:00.000
Modified: 2017-12-19T02:29:11.207
Link: CVE-2000-0696
Redhat
No data.