CVEvulnerability
CVE-2002-0096
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-03-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
The installation of Geeklog 1.3 creates an extra group_assignments record which is not properly deleted, which causes the first newly created user to be added to the GroupAdmin and UserAdmin groups, which could provide that user with administrative privileges that were not intended.
Affected configurations
• geeklog geeklog 1.3
References
- http://geeklog.sourceforge.net/index.php?topic=Security geeklog.sourceforge.net
- http://www.iss.net/security_center/static/7780.php Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/248367 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/3783 Patch, Vendor Advisory
- http://geeklog.sourceforge.net/index.php?topic=Security geeklog.sourceforge.net
- http://www.iss.net/security_center/static/7780.php Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/248367 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/3783 Patch, Vendor Advisory