CVE-2000-0688

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-08/0292.htmlExploit, Vendor Advisory
http://marc.info/?l=bugtraq&m=96722957421029&w=2
http://www.cgiscriptcenter.com/subscribe/
http://www.securityfocus.com/bid/1607Exploit, Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-08/0292.htmlExploit, Vendor Advisory
http://marc.info/?l=bugtraq&m=96722957421029&w=2
http://www.cgiscriptcenter.com/subscribe/
http://www.securityfocus.com/bid/1607Exploit, Patch, Vendor Advisory

Timeline

Published: Oct 20, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-06897.5Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain pri CVE-2000-069010.0Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile pa CVE-2000-06912.1The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a s CVE-2000-06925.0ISS RealSecure 3.2.1 and 3.2.2 allows remote attackers to cause a denial of service via a flood of fragmented packets with the SYN flag set.CVE-2000-06937.2pgxconfig in the Raptor GFX configuration tool uses a relative path name for a system call to the "cp" program, which allows local users to CVE-2000-06947.2pgxconfig in the Raptor GFX configuration tool allows local users to gain privileges via a symlink attack.CVE-2000-06957.2Buffer overflows in pgxconfig in the Raptor GFX configuration tool allow local users to gain privileges via command line options.CVE-2000-06967.5The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI CVE-2000-069710.0The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell CVE-2000-06985.0Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user via a symlink attack.CVE-2000-069910.0Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via fo CVE-2000-07005.0Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11.2(19)GS0.2 and some