CVE-2000-0117

High

Published: 30/01/2000(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.44%

35th percentile - higher than 35% of all known CVEs

Summary

The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possibly admin (root).

Risk Assessment

The ability for unauthorized users to change passwords poses a serious risk to the security of the system and data. This could lead to unauthorized access to user and administrative accounts.

Recommendation

It is recommended to restrict access to the siteUserMod.cgi program to trusted administrators only and to implement additional authorization mechanisms.

Other vulnerabilities in Cobalt RaQ2 servers

CVE-1999-0722High
The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages.

Original NVD description (English source)

The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possibly admin (root).