Lucene search
PRIOn knowledge basePRION:CVE-2009-4354HistoryDec 17, 2009 - 6:30 p.m.
Code injection
2009-12-1718:30:00
PRIOn knowledge base
www.prio-n.com
4
TransWARE Active! mail 2003 build 2003.0139.0871 and earlier does not properly secure the session ID in a session cookie, which allows remote attackers to hijack web sessions, probably related to the “secure” flag for cookies in SSL sessions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| active\\!_mail | le | 2003 | |
| active\\!_mail | eq | 1.422 | |
| active\\!_mail | eq | 2.0 |
Related
cve
cve
CVE-2009-4354
2009-12-17 18:30:00
cvelist
cvelist
CVE-2009-4354
2009-12-17 18:00:00
nvd
nvd
CVE-2009-4354
2009-12-17 18:30:00
jvn
jvn
JVN#36207497 Active! mail 2003 cookie disclosure vulnerability
2009-12-08 00:00:00