CNCVE编号：CNCVE-20000944 CVE编号：CVE-2000-0944 安全级别：中 漏洞中文描述： 在口令变更操作中，CGI Script Center News Update 1.1 不能正确地验证初始的管理口令，这将导致远程攻击者不用知道原始口令就能更改口令。 漏洞英文描述： CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original password. 漏洞参考： BUGTRAQ:20001027 CGI-Bug: News Update 1.1 administration password bug | URL:http://archives.neohapsis.com/archives/bugtraq/2000-10/0402.html | BID:1881 | URL:http://www.securityfocus.com/bid/1881 | XF:news-update-bypass-password | URL: 系统类型：其他 漏洞类型：输入有效性检查错误