PT-2002-1182 · Geeklog · Geeklog

Published 2002-03-25 · Updated 2008-09-05 · CVE-2002-0096

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Geeklog version 1.3

Description The issue arises during the installation of Geeklog, where an extra group assignments record is created but not properly deleted. As a result, the first newly created user is inadvertently added to the GroupAdmin and UserAdmin groups, potentially granting them unintended administrative privileges.

Recommendations For Geeklog version 1.3, ensure that the extra group assignments record is manually deleted after installation to prevent unintended administrative access.

Fix

Related Identifiers

CVE-2002-0096

Affected Products

Geeklog

References · 6

• http://iss.net/security_center/static/7780.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0096 · Security Note
• http://securityfocus.com/archive/1/248367 · Vendor Advisory
• http://securityfocus.com/bid/3783 · Vendor Advisory
• http://geeklog.sourceforge.net/index.php?topic=Security · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0096 · Note