← All advisories

Unrated severityNVD Advisory· Published Aug 12, 2002· Updated Jun 16, 2026

CVE-2002-0523

CVE-2002-0523

Description

ASP-Nuke RC2 and earlier allows remote attackers to list all logged-in users by submitting an invalid "pseudo" cookie.

Affected products

3

Asp Nuke/Asp Nuke3 versions
cpe:2.3:a:asp-nuke:asp-nuke:rc1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:asp-nuke:asp-nuke:rc1:*:*:*:*:*:*:*
- cpe:2.3:a:asp-nuke:asp-nuke:rc2:*:*:*:*:*:*:*
- (no CPE)range: <= RC2

Patches

Vulnerability mechanics

References

5

www.iss.net/security_center/static/8833.phpnvdPatchVendor Advisory
www.securityfocus.com/bid/4489nvdPatchVendor Advisory
online.securityfocus.com/archive/82/266705nvd
www.asp-nuke.com/news.aspnvd
www.ifrance.com/kitetoua/tuto/ASPNuke.txtnvd

News mentions

0

No linked articles in our index yet.