PT-2000-1279 · Allaire · Allaire Forums

Published 2000-04-03 · Updated 2008-09-10 · CVE-2000-0297

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Allaire Forums version 2.0.5

Description The issue allows remote attackers to bypass access restrictions to secure conferences. This is achieved by exploiting the rightAccessAllForums or rightModerateAllForums variables.

Recommendations For Allaire Forums version 2.0.5, consider restricting access to the rightAccessAllForums and rightModerateAllForums variables to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2000-0297

Affected Products

Allaire Forums

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2000-0297 · Security Note
• http://osvdb.org/1270 · Note
• http://securityfocus.com/bid/1085 · Note
• http://www2.allaire.com/handlers/index.cfm?ID=15099&Method=Full · Note