CVE-2000-0696

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2000-10-20 · updated 2026-06-16

Description

The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script.

Affected products

Sun Solaris Answerbook2: 1.3, 1.4, 1.4.1, 1.4.2

References

http://archives.neohapsis.com/archives/sun/2000-q3/0001.html
http://seclists.org/bugtraq/2000/Aug/0105.html
http://www.s21sec.com/en/avisos/s21sec-004-en.txt
http://www.securityfocus.com/bid/1554
https://exchange.xforce.ibmcloud.com/vulnerabilities/5069
http://archives.neohapsis.com/archives/sun/2000-q3/0001.html
http://seclists.org/bugtraq/2000/Aug/0105.html
http://www.s21sec.com/en/avisos/s21sec-004-en.txt
http://www.securityfocus.com/bid/1554
https://exchange.xforce.ibmcloud.com/vulnerabilities/5069

Get alerted when CVE-2000-0696 or the next vulnerability affects your stack