Lucene search
HistoryFeb 02, 2002 - 5:00 a.m.
CVE-2001-0972
cve-2001-0972
surf-net asp forum
guessable cookies
remote attack
admin privileges
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.4 High
AI Score
Confidence
Low
0.009 Low
EPSS
Percentile
82.4%
Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows remote attackers to gain administrative privileges by calculating the value of the admin cookie (UserID 1), i.e. “0888888.”
Affected configurations
Node
surf-netasp_forumRange≤2.30
ORsurf-netasp_forumMatch2.20
| CPE | Name | Operator | Version |
|---|---|---|---|
| surf-net:asp_forum | surf-net asp forum | le | 2.30 |
| surf-net:asp_forum | surf-net asp forum | eq | 2.20 |
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.4 High
AI Score
Confidence
Low
0.009 Low
EPSS
Percentile
82.4%
Related for CVE-2001-0972