CVE-2006-4658

Impact

Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses sequential message numbers in generated URLs that are not filtered if the user replies to a message, which might allow remote attackers to determine mail usage patterns.

Affected products

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/21769
• http://securityreason.com/securityalert/1524
• http://www.security.nnov.ru/advisories/pandais.asp
• http://www.securityfocus.com/archive/1/445479/100/0/threaded
• http://www.securityfocus.com/bid/19891
• http://secunia.com/advisories/21769
• http://securityreason.com/securityalert/1524
• http://www.security.nnov.ru/advisories/pandais.asp
• http://www.securityfocus.com/archive/1/445479/100/0/threaded
• http://www.securityfocus.com/bid/19891