Geeklog New User Default Admin Privileges Vulnerability
BID:3783
Info
Geeklog New User Default Admin Privileges Vulnerability
| Bugtraq ID: | 3783 |
| Class: | Configuration Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 04 2002 12:00AM |
| Updated: | Jan 04 2002 12:00AM |
| Credit: | This vulnerability was submitted to BugTraq on January 4th, 2001 by "Woody Hughes" <[email protected]>. |
| Vulnerable: |
Geeklog Geeklog 1.3 |
| Not Vulnerable: | |
Discussion
Geeklog New User Default Admin Privileges Vulnerability
Geeklog is freely available, open-source weblog software. It allows users to create a virtual community area, complete with user administration, story posting, etc. It is written in PHP and will run on most Unix and Linux variants, as well as Microsoft Windows NT/2000. Geeklog is backended by MySQL.
A vulnerability has been discovered in Geeklog version 1.3 that may allow the unprivileged, regular user to sign onto the service to gain admin rights.
The first new user to create an account with the service is a member of the GroupAdmin/UserAdmin Groups, which allows for administration of both users and groups. This is due to an oversight in the design of the product.
Geeklog is freely available, open-source weblog software. It allows users to create a virtual community area, complete with user administration, story posting, etc. It is written in PHP and will run on most Unix and Linux variants, as well as Microsoft Windows NT/2000. Geeklog is backended by MySQL.
A vulnerability has been discovered in Geeklog version 1.3 that may allow the unprivileged, regular user to sign onto the service to gain admin rights.
The first new user to create an account with the service is a member of the GroupAdmin/UserAdmin Groups, which allows for administration of both users and groups. This is due to an oversight in the design of the product.
Exploit / POC
Geeklog New User Default Admin Privileges Vulnerability
There is no exploit code required.
There is no exploit code required.
Solution / Fix
Geeklog New User Default Admin Privileges Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.