CVE-2001-1011: Critical severity Mambo Mambo Site Server vulnerability
Published Jul 25, 2001
·Updated
index2.php in Mambo Site Server 3.0.0 through 3.0.5 allows remote attackers to gain Mambo administrator privileges by setting the PHPSESSID parameter and providing the appropriate administrator information in other parameters.
Affected Software
6 affected components
Mambo Mambo Site Server=3.0.4
Mambo Mambo Site Server=3.0.3
Mambo Mambo Site Server=3.0
Mambo Mambo Site Server=3.0.5
Mambo Mambo Site Server=3.0.1
Mambo Mambo Site Server=3.0.2
Remediation
Patch Available
Event History
Jul 25, 2001
CVE Published
04:00 AM
Mar 9, 2002
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-1011?
CVE-2001-1011 has a high severity rating due to its ability to allow remote attackers to gain administrative privileges.
2
How do I fix CVE-2001-1011?
To fix CVE-2001-1011, upgrade Mambo Site Server to version 3.0.6 or later.
3
Which versions of Mambo Site Server are affected by CVE-2001-1011?
CVE-2001-1011 affects Mambo Site Server versions 3.0.0 through 3.0.5.
4
What can attackers do with CVE-2001-1011?
Attackers exploiting CVE-2001-1011 can gain unauthorized administrator access, compromising site integrity.
5
How widespread is CVE-2001-1011?
CVE-2001-1011 has been identified in multiple deployments of Mambo Site Server, particularly those not updated past version 3.0.5.