CVE-2000-0689

Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the amadmin.pl script with the setpasswd parameter.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

7.81% chance of exploitation in the next 30 days, 94th percentile

Published

2000-09-21

Updated

2024-08-08

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/20165
• https://www.exploit-db.com/exploits/20164

References

• CVE Record
• NVD entry

Related

• CVE-2000-0688
• CVE-2000-0690
• CVE-2000-0685
• CVE-2000-0691
• CVE-2000-0684
• CVE-2000-0693