CVE-2001-0972
Published Aug 31, 2001
Last updated 7 years ago
Overview
- Description
- Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows remote attackers to gain administrative privileges by calculating the value of the admin cookie (UserID 1), i.e. "0888888."
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 10
- Impact score
- 10
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:surf-net:asp_forum:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F18893E-57BC-46D7-A55F-63E6AE414953",
"versionEndIncluding": "2.30"
},
{
"criteria": "cpe:2.3:a:surf-net:asp_forum:2.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1BDE962E-BCD3-471D-902B-91C4758D682B"
}
],
"operator": "OR"
}
]
}
]