Ecartis HTML Field Manipulation Arbitrary User Password Reset

medium Nessus Plugin ID 11505

Language:

Synopsis

A web application running on the remote host has an arbitrary password reset vulnerability.

Description

The remote host is running the Ecartis Mailing List Manager web interface (lsg2.cgi).

According to its version number, there is a vulnerability that allows an authenticated user to change anyone's password, including the list administrators. An authenticated attacker could exploit this to take control of the mailing list.

Solution

Upgrade to an Ecartis Mailing List Manager snapshot version after 20030227.

Plugin Details

Severity: Medium

ID: 11505

File Name: ecartis_hidden_username.nasl

Version: 1.19

Type: remote

Family: CGI abuses

Published: 3/30/2003

Updated: 1/19/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.5

CVSS v2

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:P/A:P

Vulnerability Information

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Available: true

Exploit Ease: No exploit is required

Vulnerability Publication Date: 2/27/2003

Reference Information

CVE: CVE-2003-0162

BID: 6971

Detections

Analytics