high7.5
CVE-2005-4266
WorldClient.dll in Alt-N MDaemon and WorldClient 8.1.3 trusts a Session parameter that contains a randomly generated session ID that is associated with a usern…
Impact
WorldClient.dll in Alt-N MDaemon and WorldClient 8.1.3 trusts a Session parameter that contains a randomly generated session ID that is associated with a username, which allows remote attackers to perform actions as other users by guessing or sniffing the random value.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alt-N | Mdaemon | Version 8.1.3 |
| Alt-N | Worldclient | Version 8.1.3 |