Back to CVE Browser

CVE-2000-0696

HIGH

7.5

CVSS Severity Score

EPSS Score0.0360%

EPSS Percentile2.04th

PublishedOct 20, 2000

Last ModifiedApr 16, 2026

Vulnerability Description

The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script.

Affected Platforms (CPE)

📦

Sun

Solaris Answerbook2

= 1.3

📦

Sun

Solaris Answerbook2

= 1.4

📦

Sun

Solaris Answerbook2

= 1.4.1

📦

Sun

Solaris Answerbook2

= 1.4.2

References & Advisories

🔗 http://archives.neohapsis.com/archives/sun/2000-q3/0001.html

🔗 http://seclists.org/bugtraq/2000/Aug/0105.html

🔗 http://www.s21sec.com/en/avisos/s21sec-004-en.txt

🔗 http://www.securityfocus.com/bid/1554

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/5069

🔗 http://archives.neohapsis.com/archives/sun/2000-q3/0001.html

🔗 http://seclists.org/bugtraq/2000/Aug/0105.html

🔗 http://www.s21sec.com/en/avisos/s21sec-004-en.txt

Related Vulnerabilities

CVE-2000-069710.0

The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands...

CVE-2005-05484.3

Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject ...

CVE-2005-05494.3

Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject ...

CVE-2000-004010.0

glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command.

CVE-2000-0696 Detail & Impact Analysis | CVSS 7.5 (HIGH) | Cyber-Sec.Space | Cyber-Sec.Space