CVE-2000-1023

The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name information via the nsManager.cgi CGI program.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2000-12-11

Last modified

2024-08-08

Affected products

• Control Panel (Alabanza)

References

• http://www.securityfocus.com/archive/1/84766
• http://www.securityfocus.com/bid/1710
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5284