CVE
- Id
- 15470
- CVE No.
- CVE-2005-4266
- Status
- Candidate
- Description
- WorldClient.dll in Alt-N MDaemon and WorldClient 8.1.3 trusts a Session parameter that contains a randomly generated session ID that is associated with a username, which allows remote attackers to perform actions as other users by guessing or sniffing the random value.
- Phase
- Assigned (20051215)
- Votes
- None (candidate not yet proposed)
- Comments