high7.5
CVE-2001-1284
Ipswitch IMail 7.04 and earlier uses predictable session IDs for authentication, which allows remote attackers to hijack sessions of other users.
Impact
Ipswitch IMail 7.04 and earlier uses predictable session IDs for authentication, which allows remote attackers to hijack sessions of other users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ipswitch | Imail | Versions 6.0.2, 6.0.6, 7.0.4 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-10/0082.html
- http://www.ipswitch.com/Support/IMail/news.html
- http://www.securityfocus.com/bid/3428
- http://archives.neohapsis.com/archives/bugtraq/2001-10/0082.html
- http://www.ipswitch.com/Support/IMail/news.html
- http://www.securityfocus.com/bid/3428