CVE-2000-0696

published 2000-10-20

CVE-2000-0696: The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

EXPLOIT

The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
google	chrome_chrome	—	—
sun	solaris_answerbook2	—	—
sun	solaris_answerbook2	—	—
sun	solaris_answerbook2	—	—
sun	solaris_answerbook2	—	—