Vulnerabilities > CVE-2002-0613 - Authentication Bypass vulnerability in Dnstools Software Dnstools 2.0Beta3/2.0Beta4

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
dnstools-software
critical
exploit available

Summary

dnstools.php for DNSTools 2.0 beta 4 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user_logged_in or user_dnstools_administrator parameters.

Vulnerable Configurations

Part Description Count
Application
Dnstools_Software
2

Exploit-Db

descriptionDNSTools 2.0 Authentication Bypass Vulnerability. CVE-2002-0613. Webapps exploit for php platform
idEDB-ID:21425
last seen2016-02-02
modified2002-04-28
published2002-04-28
reporterppp-design
sourcehttps://www.exploit-db.com/download/21425/
titleDNSTools 2.0 - Authentication Bypass Vulnerability