CVE-2002-1656

X-News (x_news) 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum of the password, e.g

published March 28, 2005

CVSS
—
EPSS
8%
Percentile
94.7
In the wild
Unconfirmed
What it is

X-News (x_news) 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum of the password, e.g. via sniffing or the users.txt data file, and providing it in a cookie.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08051 · 94.7th percentile
Published
2005-03-28T05:00Z
EPSS history
Timeline
  • 28 MAR 05:00Z
    X-News (x_news) 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum of the password, e.g
    cvelistv5