CVE-2001-1534

Опубликовано: 31 дек. 2001

Источник: nvd

CVSS2: 2.1

EPSS Низкий

Описание

mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP address, system time and server process ID, which allows local users to obtain session ID's and bypass authentication when these session ID's are used for authentication.

Ссылки

http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00084.html
Broken Link
http://www.iss.net/security_center/static/7494.php
Broken Link
http://www.securityfocus.com/bid/3521
Third Party Advisory
VDB Entry
http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00084.html
Broken Link
http://www.iss.net/security_center/static/7494.php
Broken Link
http://www.securityfocus.com/bid/3521
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*

Версия от 1.3.11 (включая) до 1.3.20 (включая)

EPSS

Процентиль: 36%

0.00146

Низкий

2.1 Low

CVSS2

Дефекты

CWE-384

Связанные уязвимости

CVE-2001-1534

debian

больше 23 лет назад

mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's u ...

GHSA-gp27-vhqc-jqvp

github

около 3 лет назад