CVE Vulnerabilities

CVE-2001-1535

Published: Dec 31, 2001 | Modified: Sep 05, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Slashcode 2.0 creates new accounts with an 8-character random password, which could allow local users to obtain session IDs from cookies and gain unauthorized access via a brute force attack.

Affected Software

Name Vendor Start Version End Version
Slashcode Open_source_development_network 2.0 2.0
Slash Ubuntu dapper *
Slash Ubuntu edgy *
Slash Ubuntu feisty *

References