Sun AnswerBook2 1.4.2/1.4.3/1.4.4 Administration Interface Access

2000-08-08T00:00:00
ID EDB-ID:20144
Type exploitdb
Reporter Lluis Mora
Modified 2000-08-08T00:00:00

Description

Sun AnswerBook2 1.4.2/1.4.3/1.4.4 Administration Interface Access. CVE-2000-0696 . Remote exploit for solaris platform

                                        
                                            source: http://www.securityfocus.com/bid/1554/info

A lack of authentication checks for certain scripts within the administration interface of AnswerBook2 versions 1.4.2 and prior, for Solaris, allows remote users to create administration accounts. By directly accessing the /cgi-bin/admin/admin script present under the AnswerBook2 dwhttpd web server, it is possible to add users to the administration interface. This will allow the attacker to read log files and manage content. 

http://www.example.com:8888/cgi-bin/admin/admin?command=add_user&uid=percebe&password=percebe&re_password=percebe"