NVD

Id
51477  
Name
CVE-2009-4354  
Description
TransWARE Active! mail 2003 build 2003.0139.0871 and earlier does not properly secure the session ID in a session cookie, which allows remote attackers to hijack web sessions, probably related to the "secure" flag for cookies in SSL sessions.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-12-17  
Modified Date
2009-12-21  
Seq
2009-4354  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
261115 51477 CVE-2009-4354 JVN#36207497  View
261116 51477 CVE-2009-4354 JVNDB-2009-000077  View
261117 51477 CVE-2009-4354 http://www.transware.co.jp/support_am/security/vulnerability1.html  View
261118 51477 CVE-2009-4354 activemail2003-cookie-info-disclosure(54752)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39991 JVNDB-2009-000077 Active! mail 2003 における Cookie 漏えいの脆弱性 トランスウエアが提供する Active! mail 2003 には、Cookie が漏えいする脆弱性が存在します。 CVE-2009-4354 41785 CVE-2009-4354 51477 4 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000077.html 2009-12-08 2009-12-08 View