exploitDog

CVE-2002-0523

Опубликовано: 12 авг. 2002

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

ASP-Nuke RC2 and earlier allows remote attackers to list all logged-in users by submitting an invalid "pseudo" cookie.

Ссылки

http://online.securityfocus.com/archive/82/266705
http://www.asp-nuke.com/news.asp?date=20020412&cat=11
http://www.ifrance.com/kitetoua/tuto/ASPNuke.txt
http://www.iss.net/security_center/static/8833.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/4489
Patch
Vendor Advisory
http://online.securityfocus.com/archive/82/266705
http://www.asp-nuke.com/news.asp?date=20020412&cat=11
http://www.ifrance.com/kitetoua/tuto/ASPNuke.txt
http://www.iss.net/security_center/static/8833.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/4489
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:asp-nuke:asp-nuke:rc1:*:*:*:*:*:*:*

cpe:2.3:a:asp-nuke:asp-nuke:rc2:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.01951

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-c3q7-q63g-7jw7

github

больше 3 лет назад

ASP-Nuke RC2 and earlier allows remote attackers to list all logged-in users by submitting an invalid "pseudo" cookie.

EPSS

Процентиль: 83%

0.01951

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other