CVE-2001-0922 | BDVDB-2026-3157 Detail

Description#

ndcgi.exe in Netdynamics 4.x through 5.x, and possibly earlier versions, allows remote attackers to steal session IDs and hijack user sessions by reading the SPIDERSESSION and uniqueValue variables from the login field, then using those variables after the next user logs in.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/7620
http://www.securityfocus.com/bid/3583
http://marc.info/?l=bugtraq&m=100681274915525&w=2

Exploit#

No public exploit known

History#

Version 12002-02-02Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.