CVEvulnerability

CVE-2000-0627

7.5 HIGH Published 2000-07-18 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2000-07-18
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain privileges by directly calling the supporting CGI programs such as user_update_passwd.pl and user_update_admin.pl.

Affected configurations

• blackboard courseinfo 4.0 • blackboard courseinfo unix

References

http://archives.neohapsis.com/archives/bugtraq/2000-07/0254.html Vendor Advisory
http://www.securityfocus.com/bid/1486 Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3D20000719151904.I17986%40securityfocus.com www.securityfocus.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/4946 exchange.xforce.ibmcloud.com
http://archives.neohapsis.com/archives/bugtraq/2000-07/0254.html Vendor Advisory
http://www.securityfocus.com/bid/1486 Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3D20000719151904.I17986%40securityfocus.com www.securityfocus.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/4946 exchange.xforce.ibmcloud.com