Ecartis User Password Reset Privilege Escalation

Medium Nessus Network Monitor Plugin ID 1574

Synopsis

The remote host is running the Ecartis Mailing List Manager web interface (lsg2.cgi).

Description

The remote host is running the Ecartis Mailing List Manager web interface (lsg2.cgi). There is a vulnerability in versions older than version 1.0.0 snapshot 20030227 which allows an attacker to spoof a username while changing passwords, thus potentially gaining control of the mailing list.

Solution

Upgrade to version 1.0.0 snapshot 20030227 or higher.

See Also

http://archives.neohapsis.com/archives/bugtraq/2003-02/0358.html

http://archives.neohapsis.com/archives/bugtraq/2003-03/0035.html

Plugin Details

Severity: Medium

ID: 1574

File Name: 1574.prm

Family: Web Servers

Published: 2004/08/20

Modified: 2016/02/05

Dependencies: 1442

Nessus ID: 11505

Risk Information

Risk Factor: Medium

CVSSv2

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:P/A:P

Temporal Vector: CVSS2#E:H/RL:OF/RC:C

CVSSv3

Base Score: 5.3

Temporal Score: 5

Vector: CVSS3#AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Temporal Vector: CVSS3#E:H/RL:O/RC:C

Reference Information

CVE: CVE-2003-0162, CVE-2004-0913

BID: 6971, 11487

OSVDB: 9796