Seattle Lab Emurl 2.0 Email Account 账号访问漏洞

漏洞信息详情

Seattle Lab Emurl 2.0 Email Account 账号访问漏洞

• CNNVD编号：CNNVD-200005-054
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2000-0397
  
• 漏洞类型：
  
  
  访问验证错误
  
• 发布时间：
  
  2000-05-15
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-05-02
  
• 厂        商：
  
  seattle_lab_software
• 漏洞来源：
  Posted to Bugtraq …

The EMURL web-based email account软件在用户会话URLs编码标识符可预测，存在漏洞，远程攻击者可以利用这个漏洞访问用户email账户。

Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com.
Seattle Lab is aware of the issue and will address it in their next version of Emurl.

来源: BID
名称: 1203
链接:http://www.securityfocus.com/bid/1203

来源: BUGTRAQ
名称: 20000515 Vulnerability in EMURL-based e-mail providers
链接:http://archives.neohapsis.com/archives/bugtraq/2000-05/0160.html