CVE-2002-0523 - Vulnerability Details - OpenCVE

ASP-Nuke RC2 and earlier allows remote attackers to list all logged-in users by submitting an invalid "pseudo" cookie.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

AV:N/AC:L/Au:N/C:P/I:N/A:N

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Asp-nuke	Asp-nuke

Configuration 1 [-]

OR	cpe:2.3:a:asp-nuke:asp-nuke:rc1:::::::*
	cpe:2.3:a:asp-nuke:asp-nuke:rc2:::::::*

No data.

References

Link	Providers
http://online.securityfocus.com/archive/82/266705
http://www.asp-nuke.com/news.asp?date=20020412&cat=11
http://www.ifrance.com/kitetoua/tuto/ASPNuke.txt
http://www.iss.net/security_center/static/8833.php
http://www.securityfocus.com/bid/4489

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2002-06-11T04:00:00

Updated: 2024-08-08T02:49:28.521Z

Reserved: 2002-06-07T00:00:00

Link: CVE-2002-0523

Vulnrichment

No data.

NVD

Status : Modified

Published: 2002-08-12T04:00:00.000

Modified: 2024-11-20T23:39:17.270

Link: CVE-2002-0523

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:asp-nuke:asp-nuke:rc1:*:*:*:*:*:*:*", "matchCriteriaId": "938ABD92-4141-4270-A48B-19B512C84D42", "vulnerable": true}, {"criteria": "cpe:2.3:a:asp-nuke:asp-nuke:rc2:*:*:*:*:*:*:*", "matchCriteriaId": "2B143E89-D58C-42DC-96B0-F7292A1ECBDE", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "ASP-Nuke RC2 and earlier allows remote attackers to list all logged-in users by submitting an invalid \"pseudo\" cookie."}, {"lang": "es", "value": "ASP-Nuke RC2 y anteriores, permiten a atacantes remotos listar todos los usuarios conectados mediante el env\u00edo de una cookie: 'pseudo' no v\u00e1lida."}], "id": "CVE-2002-0523", "lastModified": "2024-11-20T23:39:17.270", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2002-08-12T04:00:00.000", "references": [{"source": "cve@mitre.org", "url": "http://online.securityfocus.com/archive/82/266705"}, {"source": "cve@mitre.org", "url": "http://www.asp-nuke.com/news.asp?date=20020412&cat=11"}, {"source": "cve@mitre.org", "url": "http://www.ifrance.com/kitetoua/tuto/ASPNuke.txt"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.iss.net/security_center/static/8833.php"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.securityfocus.com/bid/4489"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://online.securityfocus.com/archive/82/266705"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.asp-nuke.com/news.asp?date=20020412&cat=11"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.ifrance.com/kitetoua/tuto/ASPNuke.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.iss.net/security_center/static/8833.php"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.securityfocus.com/bid/4489"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}