CVE-2000-0970

15Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 44%

probabilidade de exploração

44%top 1% das CVEs

exploração observada

nãonenhuma fonte reporta

IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remote attackers to hijack the secure web session of the user if that user moves to an insecure session, aka the "Session ID Cookie Marking" vulnerability.

Produtos afetados

n/a · n/a

Referências

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-080 https://exchange.xforce.ibmcloud.com/vulnerabilities/5396 http://www.acrossecurity.com/aspr/ASPR-2000-07-22-1-PUB.txt http://www.osvdb.org/7265