Vulnerability Description
The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attackers to gain privileges via wsisa.dll.
CVSS Score
7.5
HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Progress | Webspeed | 3.0 |
References
- http://www.progress.com/services/support/cgi-bin/techweb-kbase.cgi/webkb.html?kb
- http://www.securityfocus.com/bid/969
- http://www.progress.com/services/support/cgi-bin/techweb-kbase.cgi/webkb.html?kb
- http://www.securityfocus.com/bid/969
FAQ
What is CVE-2000-0127?
CVE-2000-0127 is a vulnerability with a CVSS score of 7.5 (HIGH). The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attackers to gain privileges via wsisa.dll.
How severe is CVE-2000-0127?
CVE-2000-0127 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2000-0127?
Check the references section above for vendor advisories and patch information. Affected products include: Progress Webspeed.