CVE-2002-0267

Published: May 29, 2002Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

preferences.php in Simple Internet Publishing System (SIPS) before 0.3.1 allows remote attackers to gain administrative privileges via a linebreak in the "theme" field followed by the Status::admin command, which causes the Status line to be entered into the password file.

Affected (4)

Products: Sips: Sips

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Sips Sips	Version 0.2.4
Sips Sips	Version 0.3.0
Sips Sips	Version 0.3.0pl1
Sips Sips	Version 0.3.0pl2

References (8)

http://marc.info/?l=bugtraq&m=101363233905645&w=2

Source: cve@mitre.org

http://sips.sourceforge.net/adminvul.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.iss.net/security_center/static/8193.php

Source: cve@mitre.org

http://www.securityfocus.com/bid/4097

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=101363233905645&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://sips.sourceforge.net/adminvul.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.iss.net/security_center/static/8193.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/4097

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.