CVE-2000-0696

Published: Oct 20, 2000Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script.

Affected (4)

Products: Sun: Solaris Answerbook2

1 product

Solaris Answerbook2

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Sun Solaris Answerbook2	Version 1.3
Sun Solaris Answerbook2	Version 1.4.1
Sun Solaris Answerbook2	Version 1.4.2
Sun Solaris Answerbook2	Version 1.4

References (10)

http://archives.neohapsis.com/archives/sun/2000-q3/0001.html

Source: cve@mitre.org

PatchVendor Advisory

http://seclists.org/bugtraq/2000/Aug/0105.html

Source: cve@mitre.org

http://www.s21sec.com/en/avisos/s21sec-004-en.txt

Source: cve@mitre.org

http://www.securityfocus.com/bid/1554

Source: cve@mitre.org

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/5069

Source: cve@mitre.org

http://archives.neohapsis.com/archives/sun/2000-q3/0001.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://seclists.org/bugtraq/2000/Aug/0105.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.s21sec.com/en/avisos/s21sec-004-en.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/1554

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/5069

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.