Cobalt siteUserMod.cgi Arbitrary Password Modification

high Nessus Plugin ID 10253

Synopsis

The remote web server contains a CGI script that allows modification of arbitrary passwords.

Description

The Cobalt 'siteUserMod' CGI appears to be installed on the remote web server. Older versions of this CGI may allow a user with Site Administrator access to change the password of users on the system, such as Site Administrator or regular users, or the admin (root) user.

Note that Nessus has only determined that a script with this name exists. It has not tried to exploit the issue or determine the version installed.

Solution

Apply the appropriate patch referenced in the vendor advisory above.

Plugin Details

Severity: High

ID: 10253

File Name: siteUserMod.nasl

Version: 1.32

Type: remote

Family: CGI abuses

Published: 1/31/2000

Updated: 1/19/2021

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 8.5

Temporal Score: 6.3

Vector: CVSS2#AV:N/AC:M/Au:S/C:C/I:C/A:C

Vulnerability Information

Required KB Items: Settings/ParanoidReport

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Ease: No exploit is required

Vulnerability Publication Date: 1/27/2000

Reference Information

CVE: CVE-2000-0117

BID: 951

Detections

Analytics