CVE-2002-0267

UNKNOWN

preferences

Published Apr 2, 2003

Modified 1 years ago

Details

preferences.php in Simple Internet Publishing System (SIPS) before 0.3.1 allows remote attackers to gain administrative privileges via a linebreak in the "theme" field followed by the Status::admin command, which causes the Status line to be entered into the password file.

References

WEB

http://marc.info/?l=bugtraq&m=101363233905645&w=2

WEB

http://sips.sourceforge.net/adminvul.html

WEB

http://www.iss.net/security_center/static/8193.php

WEB

http://www.securityfocus.com/bid/4097

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2002-0267

CVSS Analysis