IceWarp Web Mail Session ID Disclosure Vulnerability
BID:12143
Info
IceWarp Web Mail Session ID Disclosure Vulnerability
| Bugtraq ID: | 12143 |
| Class: | Design Error |
| CVE: |
CVE-2002-0258 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 09 2002 12:00AM |
| Updated: | Jul 12 2009 09:26AM |
| Credit: | Discovery of this vulnerability is credited to Hüseyin Uslu <[email protected]>. |
| Vulnerable: |
IceWarp Web Mail 3.1.4 IceWarp Web Mail 1.40.10 IceWarp Web Mail 1.40 .00 |
| Not Vulnerable: |
IceWarp Web Mail 3.3.1 |
Discussion
IceWarp Web Mail Session ID Disclosure Vulnerability
IceWarp Web Mail is reported to be affected by a vulnerability related to session ID handling. The cause of the issue is that session IDs may be included in 'answer' and 'forward' link in email responses, exposing the session ID to other user's of the Web mail system.
This issue may be exploited to hijack a user's session.
IceWarp Web Mail is reported to be affected by a vulnerability related to session ID handling. The cause of the issue is that session IDs may be included in 'answer' and 'forward' link in email responses, exposing the session ID to other user's of the Web mail system.
This issue may be exploited to hijack a user's session.
Exploit / POC
IceWarp Web Mail Session ID Disclosure Vulnerability
No exploit is required. The following example demonstrates how a malicious user may access another user's account provided they have acquired a valid session ID:
http://www.example.com/view.html?id=[acquired ID]
No exploit is required. The following example demonstrates how a malicious user may access another user's account provided they have acquired a valid session ID:
http://www.example.com/view.html?id=[acquired ID]
Solution / Fix
IceWarp Web Mail Session ID Disclosure Vulnerability
Solution:
The vendor has addressed this issue in Ice Warp 3.3.1 and later.
IceWarp Web Mail 1.40 .00
IceWarp Web Mail 1.40.10
IceWarp Web Mail 3.1.4
Solution:
The vendor has addressed this issue in Ice Warp 3.3.1 and later.
IceWarp Web Mail 1.40 .00
-
IceWarp Web Mail Latest Downloadable Version
http://www.icewarp.com/download/webmail.zip
IceWarp Web Mail 1.40.10
-
IceWarp Web Mail Latest Downloadable Version
http://www.icewarp.com/download/webmail.zip
IceWarp Web Mail 3.1.4
-
IceWarp Web Mail Latest Downloadable Version
http://www.icewarp.com/download/webmail.zip
References
IceWarp Web Mail Session ID Disclosure Vulnerability
References:
References:
- IceWarp Homepage (IceWarp)
- IceWarp Web Mail For Windows 2003/2K/XP/NT/9x/ME Release notes. (IceWarp)