CVE-2001-0922: ndcgi.exe in Netdynamics 4.x through 5.x, and possibly earlier versions, allows remote attackers to steal s...

Security readout for executives and security teams

This is an old NetDynamics session-management flaw. If a vulnerable ndcgi.exe deployment is still reachable, an attacker could obtain reusable session values and take over another user's session. The sources do not provide a CVSS score, confirmed patch, or evidence of current exploitation. Exposure is likely limited to legacy NetDynamics applications that still run ndcgi.exe and are reachable by untrusted users, especially internet-facing deployments. Evidence is incomplete for exact affected versions beyond 4.x through 5.x and possibly earlier. Prioritize this if NetDynamics remains in production or exposed to external users. The business risk is account/session takeover, but urgency depends entirely on whether this legacy technology is still present and reachable. Mitigation focus: Identify any NetDynamics 4.x, 5.x, or earlier deployments.; Restrict public access to ndcgi.exe where business operation allows.; Check vendor or archival guidance for patches or supported replacement paths..

Prepared

Jul 1, 2026, 08:27 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.