Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2002-1656

EPSS 14.21% · P94
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2002-1656

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
X-News (x_news) 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum of the password, e.g. via sniffing or the users.txt data file, and providing it in a cookie.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
X-News不安全用户数据库权限漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
X-News是一款由PHP语言编写的新闻管理系统，X-News使用文件数据库形式存储信息，可以运行在多种Unix和Linux操作系统下，也运行在Microsoft windows操作系统平台下。 X-News由于设计错误，把用户用于认证的敏感信息以全局可读形式存储在文件中，可导致本地用户获得这些敏感信息。X-News把用户ID和MD5散列(hashes)信息存储在全局可读的db/users.txt文件中，这些信息等同与用于X-News基于COOKIE认证的信任书中的信息，本地用户可以把这些敏感信息组合在C
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2002-1656

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2002-1656

请登录查看更多情报信息。

Same Patch Batch · n/a · 2005-03-28 · 26 CVEs total

CVE-2002-1647Slash Slashcode密码泄露漏洞
CVE-2005-0469多个Telnet客户端slc_add_reply() 缓冲区溢出漏洞
CVE-2005-0468Telnet客户端env_opt_add() 缓冲区溢出漏洞
CVE-2004-1773GNU Sharutils多个缓冲区溢出漏洞
CVE-2004-1772GNU Sharutils shar命令行解析缓冲区溢出漏洞
CVE-2002-1655Netscape Enterprise Server Web Publisher拒绝服务攻击漏洞
CVE-2002-1654Netscape企业Web服务器蛮力授权攻击漏洞
CVE-2002-1653Cryptcat加密连接弱点
CVE-2002-1652CGIEmail远程缓冲区溢出漏洞
CVE-2002-1651Verity Search97错误页面跨站脚本漏洞
CVE-2002-1650SquirrelMail拼写检查器漏洞
CVE-2002-1649SquirrelMail对恶意HTML格式邮件处理的漏洞
CVE-2002-1648SquirrelMail对恶意HTML格式邮件处理的漏洞
CVE-2002-1634Netware下的Netscape Enterprise Web服务器信息泄露漏洞
CVE-2002-1646SSH Communications SSH AllowedAuthentications配置存在漏洞
CVE-2002-1645SSH Communications Secure Shell Windows客户端URLCatcher缓冲区溢出漏洞
CVE-2002-1644SSH Communications SSH Server权限提升漏洞
CVE-2002-1643Real Networks Helix Universal Server RTSP transport字段远程缓冲区溢出漏洞
CVE-2002-1642PostgreSQL VACUUM命令数据丢失漏洞
CVE-2002-1641Oracle Web Cache远程缓冲区溢出漏洞

Showing top 20 of 26 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2002-1656

No comments yet

Leave a comment