CVE-2001-0972 - Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows remote attackers to gain administrative privileges by calculating the value of the admin cookie (UserID 1), i.e

Back Back to CVE browser

HIGH

Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows remote attackers to gain administrative privileges by calculating the value of the admin cookie (UserID 1), i.e

Published Feb 2, 2002

10.0

HIGH

CVSS 2.0

EPSS 3.82%

Description

Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows remote attackers to gain administrative privileges by calculating the value of the admin cookie (UserID 1), i.e. "0888888."

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://marc.info/?l=bugtraq&m=99834088223352&w=2
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/3210
vdb-entryx_refsource_BIDPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2001-0954
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7011
vdb-entryx_refsource_XF

Link	Providers	Tags
http://marc.info/?l=bugtraq&m=99834088223352&w=2		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/3210		vdb-entryx_refsource_BIDPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2001-0954		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7011		vdb-entryx_refsource_XF