PT-2001-1463 · Newsdaemon · Newsdaemon

Published 2001-05-03 · Updated 2017-10-10 · CVE-2001-0234

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NewsDaemon versions prior to 0.21b

Description The issue allows remote attackers to execute arbitrary SQL queries and gain privileges. This is achieved by exploiting a malformed user username parameter.

Recommendations For versions prior to 0.21b, update to version 0.21b or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable parameter user username to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2001-0234

Affected Products

Newsdaemon

References · 4

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-01/0460.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0234 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6010 · Note
• http://sourceforge.net/forum/forum.php?forum_id=60570 · Note