CVE-2001-0972

Published: Aug 31, 2001Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows remote attackers to gain administrative privileges by calculating the value of the admin cookie (UserID 1), i.e. "0888888."

Affected (2)

Products: Surf Net: Asp Forum

Surf Net

1 product

Asp Forum

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Surf Net Asp Forum	version ≤ 2.30
Surf Net Asp Forum	Version 2.20

References (6)

http://marc.info/?l=bugtraq&m=99834088223352&w=2

Source: cve@mitre.org

http://www.securityfocus.com/bid/3210

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/7011

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=99834088223352&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/3210

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/7011

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.