CVE-2001-0911: High severity Francisco Burzi PHP-Nuke vulnerability
Published Nov 21, 2001
·Updated
PHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow remote attackers to gain privileges by stealing or sniffing the cookie and decoding it.
Affected Software
4 affected components
Francisco Burzi PHP-Nuke=5.3.1
Francisco Burzi PHP-Nuke=5.1
Postnuke Software Foundation Postnuke=0.64
Francisco Burzi PHP-Nuke=5.2
Event History
Nov 21, 2001
CVE Published
05:00 AM
Feb 2, 2002
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-0911?
CVE-2001-0911 is considered a high severity vulnerability due to the potential for remote privilege escalation.
2
How do I fix CVE-2001-0911?
To fix CVE-2001-0911, update PHP-Nuke to a version that does not store passwords in base-64 encoded cookies.
3
What systems are affected by CVE-2001-0911?
CVE-2001-0911 affects PHP-Nuke versions 5.1, 5.2, 5.3.1, and PostNuke version 0.64.
4
What could an attacker do with CVE-2001-0911?
An attacker could steal or sniff the base-64 encoded cookies to gain unauthorized access to user or administrator accounts.
5
Is CVE-2001-0911 still a concern today?
While CVE-2001-0911 was identified in 2001, its impact remains relevant for any systems still using vulnerable versions of PHP-Nuke.