Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2000-1015: Slashcode pre‑2.0 Alpha uses default admin password
CVE-2000-1015 · published 25 years ago
Summary
Slashcode versions earlier than 2.0 Alpha are shipped with a built‑in administrator password. Anyone who discovers this password can log in remotely, obtain full control of the system, and run commands as the administrator. Change the default password immediately and upgrade to a newer version that requires a unique admin password.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| open_source_development_network | slashcode |
<= 1.0.8 cpe:2.3:a:open_source_development_network:slashcode:*:*:*:*:*:*:*:* |
Original advisory text
The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remote attackers to gain Slashcode privileges and possibly execute arbitrary comm...
The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remote attackers to gain Slashcode privileges and possibly execute arbitrary commands.
References
- http://archives.neohapsis.com/archives/bugtraq/2000-09/0366.html Patch Vendor Advisory
- http://www.securityfocus.com/bid/1731 Patch Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5306
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Severity
7.5
High
Timeline
Published11 Dec 2000
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2000-1015 · NVD
Track software like this
Free during beta