CVE

Id
4618  
CVE No.
CVE-2002-0226  
Status
Entry  
Description
retrieve_password.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows remote attackers to request a new password on behalf of another user and use the sessionID to calculate the new password for that user.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
23102 4618 CVE-2002-0226 BUGTRAQ:20020201 Vulnerability in all versions of DCForum from dcscripts.com  View
23103 4618 CVE-2002-0226 URL:http://marc.info/?l=bugtraq&m=101258311519504&w=2  View
23104 4618 CVE-2002-0226 CONFIRM:http://www.dcscripts.com/bugtrac/DCForumID7/3.html  View
23105 4618 CVE-2002-0226 BID:4014  View
23106 4618 CVE-2002-0226 URL:http://www.securityfocus.com/bid/4014  View
23107 4618 CVE-2002-0226 XF:dcforum-cgi-recover-passwords(8044)  View
23108 4618 CVE-2002-0226 URL:http://www.iss.net/security_center/static/8044.php  View
23109 4618 CVE-2002-0226 OSVDB:2038  View
23110 4618 CVE-2002-0226 URL:http://www.osvdb.org/2038  View
23111 4618 CVE-2002-0226 OSVDB:3866  View

Related JVN