Lucene search

MitreCVE-2001-0922

HistoryFeb 02, 2002 - 5:00 a.m.

CVE-2001-0922

2002-02-0205:00:00

mitre

web.nvd.nist.gov

cve-2001-0922

netdynamics

ndcgi.exe

session hijack

session id theft

nvd.

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.032

Percentile

91.2%

JSON

ndcgi.exe in Netdynamics 4.x through 5.x, and possibly earlier versions, allows remote attackers to steal session IDs and hijack user sessions by reading the SPIDERSESSION and uniqueValue variables from the login field, then using those variables after the next user logs in.

Affected configurations

Nvd

Node

sunnetdynamicsMatch4.0

sunnetdynamicsMatch4.1

sunnetdynamicsMatch4.1.2

sunnetdynamicsMatch4.1.3

sunnetdynamicsMatch5.0

VendorProductVersionCPE
sunnetdynamics4.0cpe:2.3:a:sun:netdynamics:4.0:*:*:*:*:*:*:*
sunnetdynamics4.1cpe:2.3:a:sun:netdynamics:4.1:*:*:*:*:*:*:*
sunnetdynamics4.1.2cpe:2.3:a:sun:netdynamics:4.1.2:*:*:*:*:*:*:*
sunnetdynamics4.1.3cpe:2.3:a:sun:netdynamics:4.1.3:*:*:*:*:*:*:*
sunnetdynamics5.0cpe:2.3:a:sun:netdynamics:5.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sun	netdynamics	4.0	cpe:2.3:a:sun:netdynamics:4.0:::::::*
sun	netdynamics	4.1	cpe:2.3:a:sun:netdynamics:4.1:::::::*
sun	netdynamics	4.1.2	cpe:2.3:a:sun:netdynamics:4.1.2:::::::*
sun	netdynamics	4.1.3	cpe:2.3:a:sun:netdynamics:4.1.3:::::::*
sun	netdynamics	5.0	cpe:2.3:a:sun:netdynamics:5.0:::::::*

References

marc.info/?l=bugtraq&m=100681274915525&w=2

www.securityfocus.com/bid/3583

exchange.xforce.ibmcloud.com/vulnerabilities/7620

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.032

Percentile

91.2%

JSON

Related for CVE-2001-0922