PT-2002-1297 · Dcforum · Dcforum

Published 2002-05-16 · Updated 2016-10-18 · CVE-2002-0226

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions DCForum versions 6.x and 2000

Description The issue allows remote attackers to request a new password on behalf of another user and calculate the new password using the sessionID. This is due to the retrieve password.pl script generating predictable new passwords based on a sessionID.

Recommendations For DCForum versions 6.x and 2000, consider modifying the retrieve password.pl script to generate truly random and unique passwords, rather than basing them on the sessionID, to prevent attackers from calculating the new password. As a temporary workaround, restrict access to the retrieve password.pl script to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-0226

Affected Products

Dcforum

References · 7

• http://iss.net/security_center/static/8044.php · Vendor Advisory
• http://securityfocus.com/bid/4014 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0226 · Security Note
• http://osvdb.org/3866 · Note
• http://dcscripts.com/bugtrac/DCForumID7/3.html · Note
• http://osvdb.org/2038 · Note
• http://marc.info/?l=bugtraq&m=101258311519504&w=2 · Note