Description
preferences.php in Simple Internet Publishing System (SIPS) before 0.3.1 allows remote attackers to gain administrative privileges via a linebreak in the "theme" field followed by the Status::admin command, which causes the Status line to be entered into the password file.
References
- http://sips.sourceforge.net/adminvul.html
- sips-theme-admin-access(8193) vdb-entry
- 20020212 SIPS - vulnerable to anyone gaining admin access. mailing-list
- 4097 vdb-entry