CVE

Id
2264  
CVE No.
CVE-2000-0688  
Status
Candidate  
Description
Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter.  
Phase
Proposed (20000921)  
Votes
ACCEPT(2) Cole, Levy | MODIFY(1) Frech | NOOP(2) Christey, Wall  
Comments
Frech> XF:subscribe-me-overwrite-password | Christey> Make sure the mention of Account Manager is correct. | XF:subscribe-me-overwrite-password | http://xforce.iss.net/static/5126.php | Frech> XF:subscribe-me-overwrite-password(5126)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
8138 2264 CVE-2000-0688 BUGTRAQ:20000823 Subscribe Me Vulnerability  View
8139 2264 CVE-2000-0688 URL:http://archives.neohapsis.com/archives/bugtraq/2000-08/0292.html  View
8140 2264 CVE-2000-0688 BUGTRAQ:20000823 Re: Subscribe Me CGI Vulnerability  View
8141 2264 CVE-2000-0688 URL:http://marc.info/?l=bugtraq&m=96722957421029&w=2  View
8142 2264 CVE-2000-0688 CONFIRM:http://www.cgiscriptcenter.com/subscribe/  View
8143 2264 CVE-2000-0688 BID:1607  View

Related JVN