CVE-2000-1023

CVE-2000-1023

High · published December 11, 2000

CVSS v2.0
7.5
EPSS
9%
Percentile
95.1
In the wild
Unconfirmed
What it is

The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name information via the nsManager.cgi CGI program.

The record
Technical detail
CVSS v2.0
7.5 · HIGH
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS v4.0
Not supplied
EPSS
0.08644 · 95.1th percentile
Published
2000-12-11T10:00Z
Affected products (1)
ProductVersionsFixed in
alabanza/control_panel≤ 3.0—
References (6)
http://www.securityfocus.com/archive/1/84766 · [email protected]http://www.securityfocus.com/bid/1710 · [email protected]https://exchange.xforce.ibmcloud.com/vulnerabilities/5284 · [email protected]http://www.securityfocus.com/archive/1/84766 · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/1710 · af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/5284 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 29 NOV 05:00Z
    The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name information via…
    cvelistv5