CVE-2000-1161

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The installation of AdCycle banner management system leaves the build.cgi program in a web-accessible directory, which allows remote attackers to execute the program and view passwords or delete databases.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-11/0271.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/1969Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-11/0271.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/1969Patch, Vendor Advisory

Timeline

Published: Jan 9, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-11623.7ghostscript before 5.10-16 allows local users to overwrite files of other users via a symlink attack.CVE-2000-11634.6ghostscript before 5.10-16 uses an empty LD_RUN_PATH environmental variable to find libraries in the current directory, which could allow lo CVE-2000-11649.0WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody group, which allows us CVE-2000-11655.0Balabit syslog-ng allows remote attackers to cause a denial of service (application crash) via a malformed log message that does not have a CVE-2000-11667.5Twig webmail system does not properly set the "vhosts" variable if it is not configured on the site, which allows remote attackers to insert CVE-2000-11677.5ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat deny_incoming" command, which allows rem CVE-2000-11687.5IBM HTTP Server 1.3.6 (based on Apache) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a l CVE-2000-11697.5OpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could allow a malicious SSH server to gain access t CVE-2000-11707.5Buffer overflow in Netsnap webcam HTTP server before 1.2.9 allows remote attackers to execute arbitrary commands via a long GET request.CVE-2000-11715.0Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers to ready arbitrary files via a .. (dot dot) CVE-2000-117210.0Buffer overflow in Gaim 0.10.3 and earlier using the OSCAR protocol allows remote attackers to conduct a denial of service and possibly exec CVE-2000-11735.0Microsys CyberPatrol uses weak encryption (trivial encoding) for credit card numbers and uses no encryption for the remainder of the informa