Lucene search
HistoryApr 02, 2003 - 5:00 a.m.
CVE-2003-0162
cve-2003-0162
ecartis 1.0.0
password reset
privileges
html page
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.5 Medium
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
85.4%
Ecartis 1.0.0 (formerly listar) before snapshot 20030227 allows remote attackers to reset passwords of other users and gain privileges by modifying hidden form fields in the HTML page.
Affected configurations
Node
ecartisecartisMatch1.0.0_snapshot_2002-10-13
| CPE | Name | Operator | Version |
|---|---|---|---|
| ecartis:ecartis | ecartis | eq | 1.0.0_snapshot_2002-10-13 |
Related
debian
debian
osv
osv
ecartis - unauthorized password change
2003-03-27 00:00:00
cvelist
cvelist
CVE-2003-0162
2003-03-26 05:00:00
openvas
openvas
Debian Security Advisory DSA 271-1 (ecartis, listar)
2008-01-17 00:00:00
Debian Security Advisory DSA 271-1 (ecartis, listar)
2008-01-17 00:00:00
nvd
nvd
CVE-2003-0162
2003-04-02 05:00:00
nessus
nessus
Ecartis HTML Field Manipulation Arbitrary User Password Reset
2003-03-30 00:00:00
Debian DSA-271-1 : ecartis - unauthorized password change
2004-09-29 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.5 Medium
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
85.4%
Related for CVE-2003-0162