CVE-2001-0001

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

cookiedecode function in PHP-Nuke 4.4 allows users to bypass authentication and gain access to other user accounts by extracting the authentication information from a cookie.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Jun 2, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-00027.5Internet Explorer 5.5 and earlier allows remote attackers to obtain the physical location of cached content and open the content in the LocaCVE-2001-00035.0Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settinCVE-2001-00045.0IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.htr" to the requested CVE-2001-00056.2Buffer overflow in the parsing mechanism of the file loader in Microsoft PowerPoint 2000 allows attackers to execute arbitrary commands.CVE-2001-00067.1The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to moCVE-2001-00075.0Buffer overflow in NetScreen Firewall WebUI allows remote attackers to cause a denial of service via a long URL request to the web administrCVE-2001-000810.0Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures.CVE-2001-00095.0Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a .. attack.CVE-2001-001010.0Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.CVE-2001-001110.0Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.CVE-2001-00125.0BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables.CVE-2001-001310.0Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.
CVE-2001-0001: High severity, CVSS 7.5 | Vulnix