Hastymail2 Secure Flag Session Cookie Information Disclos ure Vulnerability
BID:46053
Info
Hastymail2 Secure Flag Session Cookie Information Disclos ure Vulnerability
| Bugtraq ID: | 46053 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 06 2009 12:00AM |
| Updated: | Dec 06 2009 12:00AM |
| Credit: | Reported by the vendor |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Hastymail2 Secure Flag Session Cookie Information Disclos ure Vulnerability
Hastymail2 is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to gain access to sensitive information that may lead to further attacks.
Versions prior to Hastymail2 RC 8 are vulnerable.
Hastymail2 is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to gain access to sensitive information that may lead to further attacks.
Versions prior to Hastymail2 RC 8 are vulnerable.
Exploit / POC
Hastymail2 Secure Flag Session Cookie Information Disclos ure Vulnerability
An attacker may use readily available tools to exploit this issue.
An attacker may use readily available tools to exploit this issue.
Solution / Fix
Hastymail2 Secure Flag Session Cookie Information Disclos ure Vulnerability
Solution:
Currently we are not aware of any vendor supplied patches If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor supplied patches If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Hastymail2 Secure Flag Session Cookie Information Disclos ure Vulnerability
References:
References:
- Hastymail2 Homepage (Hastymail)
- Hastymail2 Security Notes (Hastymail)