CVE-2001-1104

SonicWALL SOHO is affected by CVE-2001-1104 due to predictable TCP Initial Sequence Numbers, enabling remote attackers to spoof/hijack sessions. The vulnerability affects the firewall component handling TCP connections; exploitation could allow session hijacking without user interaction. A remedi...

IMail Account hijack through the Web Interface

Advisory Title: IMail Account hijack through the Web Interface Release Date: 10/03/2002 Application: IMail Server Platform: Windows NT4 Windows 2000 Windows XP Version: 7.05 or earlier Severity: Malicious users can easily access other people's accounts. Author: Obscure^ [email protected]...

CVE-2001-0922

The vulnerability CVE-2001-0922 affects Netdynamics ndcgi.exe (Netdynamics 4.x through 5.x, possibly earlier). The issue allows remote attackers to hijack user sessions by reading SPIDERSESSION and uniqueValue variables from the login field and then reusing them after the next user logs in, enabl...

CVE-2001-0737

CVE-2001-0737 describes a vulnerability in Logitech wireless mice and keyboard receivers where a long “synch” delay enables a remote attacker to hijack connections via a man‑in‑the‑middle attack. The description specifies the affected component as the wireless receivers used with Logitech periphe...

CVE-1999-1268

Vulnerability details (CVE-1999-1268) show a local-privilege/bypass issue in KDE konsole where a local user can hijack or observe another user’s session by accessing certain devices. The provided documents do not specify the exact affected version(s), vulnerable component/file, or underlying root...

CVE-2000-0854

CVE-2000-0854 affects Microsoft Office 2000 documents. The vulnerability arises because the document’s directory is used to locate DLLs (e.g., riched20.dll, msi.dll); an attacker could place a Trojan Horse DLL in the same directory to execute arbitrary commands. The connected sources confirm the ...

CVE-2000-0716

CVE-2000-0716 affects WorldClient email client in MDaemon 2.8. The session ID is included in the referer header of an HTTP request when the user clicks a URL, allowing the visited site to hijack the session ID and read the user’s email. Exploitation details are not provided in the documents, and ...

Eric Allman Sendmail 8.8.x - Socket Hijack

Eric Allman Sendmail 8.8.x - Socket Hijack // source: https://www.securityfocus.com/bid/774/info Through exploiting a combination of seemingly low-risk vulnerabilities in sendmail, it is possible for a malicious local user to have an arbitrary program inherit or "hijack" the file descriptor for t...