Exploitation Summary
EIP tracks 1 public exploit for CVE-2001-0839. PoCs published by MK Ultra.
AI-analyzed exploit summary This Java-based PoC brute-forces the default authentication password for iBill's ibillpm.pl CGI script by iterating through all possible two-letter combinations appended to the MASTER_ACCOUNT. It sends POST requests to add, delete, or change user credentials.
Description
ibillpm.pl in iBill password management system generates weak passwords based on a client's MASTER_ACCOUNT, which allows remote attackers to modify account information in the .htpasswd file via brute force password guessing.
Exploits (1)
This Java-based PoC brute-forces the default authentication password for iBill's ibillpm.pl CGI script by iterating through all possible two-letter combinations appended to the MASTER_ACCOUNT. It sends POST requests to add, delete, or change user credentials.