exploits , vulnerabilities , articles , Sun AnswerBook2 Unauthorized Administrative Script Access Vulnerability

Title	Sun AnswerBook2 Unauthorized Administrative Script Access Vulnerability
Published	2002-08-02-12:00AM
Updated	2002-08-02-05:23AM
Class	Access Validation Error
CVE	CVE-MAP-NOMATCH
Remote	Yes
Local	No
Credit	Reported by ghandi <ghandi@mindless.com>.
Vulnerable	Sun AnswerBook2 1.4.2 Sun Solaris 2.3 Sun Solaris 2.4 Sun Solaris 2.4 _x86 Sun Solaris 2.5 Sun Solaris 2.5 _x86 Sun Solaris 2.5.1 Sun Solaris 2.5.1 _ppc Sun Solaris 2.5.1 _x86 Sun Solaris 2.6 Sun Solaris 2.6 _x86 Sun Solaris 7.0 Sun Solaris 7.0 _x86 Sun Solaris 8.0 Sun Solaris 8.0 _x86 Sun AnswerBook2 1.4.1 Sun Solaris 2.3 Sun Solaris 2.4 Sun Solaris 2.4 _x86 Sun Solaris 2.5 Sun Solaris 2.5 _x86 Sun Solaris 2.5.1 Sun Solaris 2.5.1 _ppc Sun Solaris 2.5.1 _x86 Sun Solaris 2.6 Sun Solaris 2.6 _x86 Sun Solaris 7.0 Sun Solaris 7.0 _x86 Sun Solaris 8.0 Sun Solaris 8.0 _x86 Sun AnswerBook2 1.4 Sun Solaris 2.3 Sun Solaris 2.4 Sun Solaris 2.4 _x86 Sun Solaris 2.5 Sun Solaris 2.5 _x86 Sun Solaris 2.5.1 Sun Solaris 2.5.1 _ppc Sun Solaris 2.5.1 _x86 Sun Solaris 2.6 Sun Solaris 2.6 _x86 Sun Solaris 7.0 Sun Solaris 7.0 _x86 Sun Solaris 8.0 Sun Solaris 8.0 _x86 Sun AnswerBook2 1.3 Sun Solaris 2.3 Sun Solaris 2.4 Sun Solaris 2.4 _x86 Sun Solaris 2.5 Sun Solaris 2.5 _x86 Sun Solaris 2.5.1 Sun Solaris 2.5.1 _ppc Sun Solaris 2.5.1 _x86 Sun Solaris 2.6 Sun Solaris 2.6 _x86 Sun Solaris 7.0 Sun Solaris 7.0 _x86 Sun Solaris 8.0 Sun Solaris 8.0 _x86 Sun AnswerBook2 1.2
Not Vulnerable
Code	This vulnerability may be exploited with a web browser. The following sample URLs have been submitted: http://localhost:8888/ab2/@AdminViewError http://localhost:8888/ab2/@AdminAddadmin?uid=foo&password=bar&re_password=bar CORE has developed a working commercial exploit for their IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-18 Family Connections Multiple Input Validation Vulnerabilities
2009-12-18 Drupal Contact and Menu Modules Multiple HTML Injection Vulnerabilities
2009-12-18 Mozilla Firefox and SeaMonkey NTLM Credential Reflection Authentication Bypass Vulnerability
2009-12-18 Mozilla Firefox CVE-2009-3982 JavaScript Engine Multiple Remote Memory Corruption Vulnerabilities
2009-12-17 Zen Cart Insecure File and Programs Information Disclosure and Database Deletion Vulnerability
2009-12-17 Winamp Module Decoder Plugin Multiple Buffer Overflow Vulnerabilities
2009-12-17 Winamp JPEG and PNG Multiple Integer Overflow Vulnerabilities
2009-12-17 HP OpenView Storage Data Protector Stack Buffer Overflow Vulnerability
2009-12-17 IBM WebSphere Application Server Feature Pack for CEA Spoofing Vulnerability
2009-12-17 Digital Scribe Cross Site Scripting and SQL Injection Vulnerabilities