CVE

Id
2265  
CVE No.
CVE-2000-0689  
Status
Candidate  
Description
Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the amadmin.pl script with the setpasswd parameter.  
Phase
Modified (20061027)  
Votes
ACCEPT(2) Cole, Levy | MODIFY(1) Frech | NOOP(2) Christey, Wall  
Comments
Frech> XF:account-manager-overwrite-password | In description, you probably want to indicate both Account Manager LITE and PRO. | Because CONFIRM redirects, you may want to verify and normalize to http://www.cgiscriptcenter.com/acctman/index2.html. | Christey> XF:account-manager-overwrite-password | http://xforce.iss.net/static/5125.php | Frech> XF:account-manager-overwrite-password(5125)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
8144 2265 CVE-2000-0689 BUGTRAQ:20000823 Account Manager CGI Vulnerability  View
8145 2265 CVE-2000-0689 URL:http://archives.neohapsis.com/archives/bugtraq/2000-08/0291.html  View
8146 2265 CVE-2000-0689 CONFIRM:http://www.cgiscriptcenter.com/acctlite/  View
8147 2265 CVE-2000-0689 BID:1604  View
8148 2265 CVE-2000-0689 URL:http://www.securityfocus.com/bid/1604  View
8149 2265 CVE-2000-0689 OSVDB:13341  View
8150 2265 CVE-2000-0689 URL:http://www.osvdb.org/13341  View
8151 2265 CVE-2000-0689 XF:account-manager-overwrite-password(5125)  View

Related JVN