CVEvulnerability

CVE-2000-0944

9.8 CRITICAL Published 2000-12-19 Modified 2026-09-23 Official page ↗

Status: Modified
Published: 2000-12-19
Last modified: 2026-09-23
Assigner: [email protected]
CVSS 3.1 ([email protected]): 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses: CWE-522

Description

CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original password.

Affected configurations

• cgi script center news update 1.1

Weakness · CWE (1)

CWE-522 Insufficiently Protected Credentials weakness

Referenced by CWE · observed example (2)

CWE-522 Insufficiently Protected Credentials weakness
CWE-620 Unverified Password Change weakness

References

http://archives.neohapsis.com/archives/bugtraq/2000-10/0402.html Broken Link, Vendor Advisory
http://www.securityfocus.com/bid/1881 Broken Link, Exploit, Third Party Advisory, VDB Entry, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5433 Third Party Advisory, VDB Entry
http://archives.neohapsis.com/archives/bugtraq/2000-10/0402.html Broken Link, Vendor Advisory
http://www.securityfocus.com/bid/1881 Broken Link, Exploit, Third Party Advisory, VDB Entry, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5433 Third Party Advisory, VDB Entry