CVE-2000-1023

The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name information via the nsManager.cgi CGI program.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.securityfocus.com/archive/1/84766
http://www.securityfocus.com/bid/1710	Exploit Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5284
http://www.securityfocus.com/archive/1/84766
http://www.securityfocus.com/bid/1710	Exploit Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5284

Configurations

Configuration 1 (hide)

cpe:2.3:a:alabanza:control_panel:*:*:*:*:*:*:*:*

History

23 Sep 2026, 14:10

Type	Values Removed	Values Added
Summary		(es) El Panel de Control de Alabanza no requiere contraseñas para acceder a comandos administrativos, lo que permite a atacantes remotos modificar información de nombres de dominio a través del programa CGI nsManager.cgi.

Information

Published : 2000-12-11 05:00

Updated : 2026-09-23 14:10

NVD link : CVE-2000-1023

Mitre link : CVE-2000-1023

CVE.ORG link : CVE-2000-1023

JSON object : View

Products Affected

alabanza

control_panel

CWE

NVD-CWE-Other

{"id": "CVE-2000-1023", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2000-12-11T05:00:00.000", "references": [{"url": "http://www.securityfocus.com/archive/1/84766", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/1710", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/5284", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/84766", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/1710", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/5284", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name information via the nsManager.cgi CGI program."}, {"lang": "es", "value": "El Panel de Control de Alabanza no requiere contrase\u00f1as para acceder a comandos administrativos, lo que permite a atacantes remotos modificar informaci\u00f3n de nombres de dominio a trav\u00e9s del programa CGI nsManager.cgi."}], "lastModified": "2026-09-23T14:10:00.190", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:alabanza:control_panel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83EAD8B6-4C25-4834-A1A5-E1B26701440F", "versionEndIncluding": "3.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}