PT-2002-1182 · Geeklog · Geeklog

Publicado 2002-03-25 · Atualizado 2008-09-05 · CVE-2002-0096

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Geeklog version 1.3

Description The issue arises during the installation of Geeklog, where an extra group assignments record is created but not properly deleted. As a result, the first newly created user is inadvertently added to the GroupAdmin and UserAdmin groups, potentially granting them unintended administrative privileges.

Recommendations For Geeklog version 1.3, ensure that the extra group assignments record is manually deleted after installation to prevent unintended administrative access.

Correção

Identificadores relacionados

CVE-2002-0096

Produtos afetados

Geeklog

Referências · 6

• http://geeklog.sourceforge.net/index.php?topic=Security · Nota
• http://iss.net/security_center/static/7780.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0096 · Nota de Segurança
• http://securityfocus.com/archive/1/248367 · Aviso do Fabricante
• http://securityfocus.com/bid/3783 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0096 · Nota