CVE-2002-0226 retrieve_password.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows remote attackers to request a new password on behalf of another user and use the ses...
HighCVSS 7.5
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
retrieve_password.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows remote attackers to request a new password on behalf of another user and use the sessionID to calculate the new password for that user.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dcscripts dcforum | = 5.0 | No fix listed |
| dcscripts dcforum | = 6.0 | No fix listed |
| dcscripts dcforum | = 6.21 | No fix listed |
| dcscripts dcforum | = 2000 | No fix listed |
References
- 20020201 Vulnerability in all versions of DCForum from dcscripts.com mailing-list
- www.dcscripts.com
- dcforum-cgi-recover-passwords(8044) patch vdb-entry vendor-advisory
- 2038 vdb-entry
- 3866 vdb-entry
- 4014 patch vdb-entry vendor-advisory