CVE

Id
34806  
CVE No.
CVE-2008-4689  
Status
Candidate  
Description
Mantis before 1.1.3 does not unset the session cookie during logout, which makes it easier for remote attackers to hijack sessions.  
Phase
Assigned (20081022)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
381131 34806 CVE-2008-4689 MLIST:[oss-security] 20081020 Re: CVE request: mantisbt < 1.1.4: RCE  View
381132 34806 CVE-2008-4689 URL:http://www.openwall.com/lists/oss-security/2008/10/20/1  View
381133 34806 CVE-2008-4689 CONFIRM:http://www.mantisbt.org/bugs/changelog_page.php  View
381134 34806 CVE-2008-4689 CONFIRM:http://www.mantisbt.org/bugs/file_download.php?file_id=1988&type=bug  View
381135 34806 CVE-2008-4689 CONFIRM:http://www.mantisbt.org/bugs/view.php?id=9664  View
381136 34806 CVE-2008-4689 GENTOO:GLSA-200812-07  View
381137 34806 CVE-2008-4689 URL:http://www.gentoo.org/security/en/glsa/glsa-200812-07.xml  View
381138 34806 CVE-2008-4689 SECUNIA:32975  View
381139 34806 CVE-2008-4689 URL:http://secunia.com/advisories/32975  View
381140 34806 CVE-2008-4689 XF:mantis-session-cookie-hijacking(46084)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46578 JVNDB-2008-001888 IBM DB2 の SORT/LIST SERVICES コンポーネントにおける情報漏えいの脆弱性 IBM DB2 の SORT/LIST SERVICES コンポーネントには、トレース出力に重要な情報を書き込むため、情報漏えいの脆弱性が存在します。 CVE-2008-4693 34806 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001888.html  View